Analysis

  • max time kernel
    122s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 22:33

General

  • Target

    b9d46a4a8f6017c605d35f083bebe29b.pdf

  • Size

    79KB

  • MD5

    b9d46a4a8f6017c605d35f083bebe29b

  • SHA1

    ddbd7976850f8aeb0a10c060c5bc6db5b89d2c8e

  • SHA256

    5e3675d809449427609ee7328583c4e693effba20c23881279e8740dd90ccc25

  • SHA512

    fdbcd7c46cde3c3e8e4de5b8a9667be265d35500bbfbbc16fc0b1de44c202501d5c4d13d5168116b69041a5fad99748301f5d4593dec3d9727ce576fe9fab6a2

  • SSDEEP

    1536:HhL9YWKBAIzHcG8c4T2iU+U8eEs3bUFq/pFAqniBl4G0w/WJGtPuLSDbmWQpOCn6:FuWKLzHP8bUlEsIFqhFAMnwrISDbZC6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b9d46a4a8f6017c605d35f083bebe29b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4ac1aef041d0a806ea3a1920ba2d0a7c

    SHA1

    e486cc7649637bc8ec0cad001495e59ed133ff8b

    SHA256

    266530e8f72c2b32e02d6334dd7bfff5af774f72641a34e928d5744600067125

    SHA512

    00bb9c5b0ef49a566d0724b2613818ccdfe62f725b41f1b5e1b05d83cf477d4e67b5ece86ad4a68073d4f7cf079ab19da5234840390237b999cbcb31a5ffe11d