Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 23:17

General

  • Target

    b9e9b6dc35b775dcf7bf09a14d9f1eb4.pdf

  • Size

    44KB

  • MD5

    b9e9b6dc35b775dcf7bf09a14d9f1eb4

  • SHA1

    6d3e3202867a23419e119111133e46b8eda5506e

  • SHA256

    e42b640ce060162141dc2d07463f8716582827406f3e192240ccf8322a2b5998

  • SHA512

    51b256a858c10eba6f8d2d9051788527b895ab2d20358fad778fdb8c0b0a8918e818ddd8f1d121e9e7166deb999499ecfe034d826b7e875008b9c8112cc875c9

  • SSDEEP

    768:gqzFsqRv9Egr6XdeK+x1AktRlVvTml1U959KoiBDHdiu6XRo:gjSFvaeK+xptRlFaO5cZBbdiuSRo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b9e9b6dc35b775dcf7bf09a14d9f1eb4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2956

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          dcba872b5da307629546b746815d54d8

          SHA1

          4e2478502ce0e0787fee2b5e46534d4553beef94

          SHA256

          520c1d3c15842a0ce3fb325073408b95100af66ee524327dd1e0adc28bb06f06

          SHA512

          8f646c57f745c4398527dba79189d3c7de145263f779b85696b55ec64cfb557d34fe1a324f690ea1c84b1a613eb80a6e794d36e19d5d8c0f1d26a0e95779972c