Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14-02-2024 09:13

General

  • Target

    9b49faa0d8c0d2ec6b9f39b997f20e5e.pdf

  • Size

    45KB

  • MD5

    9b49faa0d8c0d2ec6b9f39b997f20e5e

  • SHA1

    786901c404f2a6c57b22d85d3ed820a13a47118c

  • SHA256

    595d160fd96301ccb5c19941d47207b3220fe559cafe4f3dc6848ec1598f1422

  • SHA512

    032e6142a9ebd1b8229c114b6ac8e9b8bc22f79728fd19cc1aabd712fa8508c4ee788b8218f59e43126ec16aa638581397c9a16087cafc904feac7826d25a94b

  • SSDEEP

    768:/7aT36yIZrDbHHgzqM05V7v3JW4FzAi5d8IO73lPPJFhJk1v:GCVDjMWV7v/TUtPJJ0v

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9b49faa0d8c0d2ec6b9f39b997f20e5e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3bc3eaa034361470e787a4abb2c505e6

    SHA1

    6c01d9c67e91cba9415041f6ec846bc63aced2f3

    SHA256

    aaa854fef5612e419ea843aaaba9fb0d5ec3b72dc375c3c7a3bdb79ca859fb7b

    SHA512

    72ae8c8ffd4cde16a41d2626821431771f36825cccedecad260fa0a3544a79cb6f2d4dc689cf939eb46892dfe683d6b2cb23c2f27679eea2f0723cef4f8e3949