Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/03/2024, 13:52

General

  • Target

    b78f6a8cc41f90afee6d96ab613ff322.pdf

  • Size

    46KB

  • MD5

    b78f6a8cc41f90afee6d96ab613ff322

  • SHA1

    c6b4141a5931e2d62ca38d86b0bdedc34995084d

  • SHA256

    0443f5e88e3f96bc86acc62249aea4d7324b951212a9cad8e6c3988483cd608c

  • SHA512

    0e91018b4c5867ac73caf9438fafbd58caf8bbced47044170926675e71ed93154cca3f00c6fa9fb50d3e1a07ff0df41058da1354df63da549821e824419f5c01

  • SSDEEP

    768:AZmNjJy7y/+IxPzmPnffXRnvxtWmIwTTWk1HMc13h1CHPCZi198oUBu1Ur+Tsqq/:ymNYUbaPnffXF0wu9c13HuPd1LiOUr+g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b78f6a8cc41f90afee6d96ab613ff322.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1932

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          178da7ecca22b3385e041bfea9200ddb

          SHA1

          4f4f17d0845de6e642810ba65ce3c10d37cca919

          SHA256

          cf6463be42dc9b1cd38c8b2ea92fb859df021f8e9bc659ace4b191ad7dd6fe69

          SHA512

          d6ee8a34be8dee18374af89ef79128d45d89f0d2c519d256c1e45004df990bd62e8b9ad711c6b5c6fd4412c3e96d61f679ff2d0f840b37b6bf8e75e51d7116c7