Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 13:38

General

  • Target

    b4d46cd7410b952285dbf9b6a0bfe43e.pdf

  • Size

    85KB

  • MD5

    b4d46cd7410b952285dbf9b6a0bfe43e

  • SHA1

    eaf8efb414309bee106ac27218355c312ab9106a

  • SHA256

    9e92318c84dde189a5e4d227114a31530553fcb21aab84d3c08dc9fd4029bffe

  • SHA512

    bd4849ac3426997a55611f8884cc1684b264cc3c4f2d0e0894fdd6dbffd483c6643fdd0b50b46e14adda32e80021f8ccb301597afaa1eb622f469f54180646f3

  • SSDEEP

    1536:l1oYTpGnYV9ZZzYgP6uwlufWjwX3D69AirnFCmg6UW9zJrhRkVx/W8pO7I+4:d0nYHXzYgIlufEwX3D69Aunb5z1PkVxX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b4d46cd7410b952285dbf9b6a0bfe43e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1540

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3cb1257954be516711ea3c793d093803

          SHA1

          b60ca92b66c6f12f52b4464e4a80f8c1a02fc57a

          SHA256

          9c0608c863bb771524e792a209a36a7c2b2f40a395115d34dd0be32b70bcbb75

          SHA512

          5a72a0cbf2d2a2644ddcd3335c1e1b82a9046166588898ddac0208c559efa8a6a5461f636d29a18706bc7c3ecb03d0777fc02cd129d67cf86e8018bc3b60bf1d