Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 20:54

General

  • Target

    b9a2661431dbe4824af1954b5dfa25f7.pdf

  • Size

    83KB

  • MD5

    b9a2661431dbe4824af1954b5dfa25f7

  • SHA1

    29dc26846df604b8b852db5e8e26144206b444b2

  • SHA256

    b4cb539ff6396552955aeb01a253490153a2d324d71ed4216fb198787c5ac232

  • SHA512

    faff847268c2bffdecc2b86a4df3bccc44c3418a70db6c6b91bbd7507368d0904c7da3f7c4634472ec79c1cdb2aa444f772fb37b211d5a55454cdf84912619aa

  • SSDEEP

    1536:mIwBskEtekP3hj+OmReL3MCvHu2I8TEpYlF52ACWHpOvv72r62ZAWgrAZsLLto6j:6BskE73h6zRQ3MB8TEpYlFsACvTqvZe9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b9a2661431dbe4824af1954b5dfa25f7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1244

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          7636460f9739f0274dbc265ddd0a2d56

          SHA1

          c79e8a78a436690a061d0a45209624595a173647

          SHA256

          ae3d3ea3deaddab30b142f66a73735f84c5419ca12b0185165ea78c4b4ed7a1e

          SHA512

          700c69b8af853d8a7ef8205e08b4b8214db2d7615281a4c6419309ba9e3651127ad55b82e6e7f4fc64894fdc553f06fa2b9d91d0fa885b2108c06f107db583ba