Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 08:03

General

  • Target

    b43575eb919887837d3fdc7e18cbae7f.pdf

  • Size

    64KB

  • MD5

    b43575eb919887837d3fdc7e18cbae7f

  • SHA1

    b411b5886f62fb741764b8f17d56f78d8571e9a0

  • SHA256

    df383e0b521f971498263b96c4b40646e090927d350e9fa5d79b3ee507ec3ead

  • SHA512

    7c7e4f5b1caeb427a213fc3ff2238dcb3e5a0076ac171ac92a8a7b4912014f183401cf959a6497ab0562ade43bd1f43c70dfa21fee1eee7ba3299e408a710cd8

  • SSDEEP

    1536:i+cUexPMJwX6yRkwFhVXBRRAwEz3htddBbFgb46aUVQDnUgYDi:5wPAY6EVXlAwK3hLd7gUp7DBr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b43575eb919887837d3fdc7e18cbae7f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7149da95aeb8f7840f0f1c190e29fdec

    SHA1

    770ce01adfd7ebbfbd8d19512fe8863af61a6a3b

    SHA256

    1499b7ed057cf82ad8e74e3e6315ae9eee0279d99a04d281b01a4d8e3594be00

    SHA512

    fa1414612dcdfa2262b582ed5c2e8f19a2876bddd02a8c09c5b38615ae260dee5e94cc5e1b013f21ee2c5202296ceabfc7d6ce2edf3ec8ce64cd93ce071f0245