Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 15:28

General

  • Target

    b911969983b7189af4e907077462396f.pdf

  • Size

    89KB

  • MD5

    b911969983b7189af4e907077462396f

  • SHA1

    0ec6bb208c18fb22c66b3f3c081790736736bbd8

  • SHA256

    9bddd0806607e48364a137daf0deb719170c80cabb7731248245f52b813569c0

  • SHA512

    a12895b3e3db4673727216ebb2a5850a300ad506423c05b95cf8142bcc2b04ab5584032bce2d887b0cd71aec35c22ccb0fc1f81ecc89b907cf00904511083fdc

  • SSDEEP

    1536:RfjcD3P/UjNAdfPTQGfFTx+ID19HQDe3zEz0eUM6Wa+8WsEj+wM9h1oW8pO7yRvY:Jjm/8edkG9Tx+IDPQDeD748W57Uh1T7N

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b911969983b7189af4e907077462396f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1636

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          00b172ae2759a86f35998d7ca90f919c

          SHA1

          2d1477e1b964b83dbfd7ad56a112e15acc65dc8b

          SHA256

          5ad2aa951dd0f73814e350d8a4634d15347285c7b9dd473c6fc5a96fe82c1730

          SHA512

          f84a680112b2a4b19a492137e0c3f1e240394fb38a010c8652c7568075fb66938297a5dbe9cd16f1cffe859086c89400be0b1014dd7b1a2a3c5d6314aab9fa5d