Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    11-03-2024 09:44

General

  • Target

    4374ef5ff83854048fac3dc97e341454246f530980458bd816792de16c2aa8f1.pdf

  • Size

    1.4MB

  • MD5

    b9d9b2c89b11ccbcf0e336a20702b373

  • SHA1

    c2fda53b76c3c5032bd644bbb6332be960e9fbcc

  • SHA256

    4374ef5ff83854048fac3dc97e341454246f530980458bd816792de16c2aa8f1

  • SHA512

    86be30ea1ea3e533ff27401b9cb5f7d75061ca42808034270fc6014b2208b26699263d8e764f32df34e093c7042c16c098c0abbf7cdab7178e666d4ad8eef9b7

  • SSDEEP

    24576:NSF53gx3jMgznN7WA8KaRPbYRoYEc2Ds/TQ//8rMvBENkjjjjjjjj9GOFobb:N+53QdhUAEFDZC1Om3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4374ef5ff83854048fac3dc97e341454246f530980458bd816792de16c2aa8f1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1ad23bf847da30a52035d67f4bfc88fe

    SHA1

    a1a29c0f6e008b6172b97ff8d0d9316cf8ab42ae

    SHA256

    b2024cc10432a2056d6d4d0fab0ed75b6e844ffaca45c20459525ec4ed0e44cc

    SHA512

    e4d65f54df2d793587536264975f99ea3b7e80923699581d36b530f69b2410cde061094d215d5c2952729a822f50ecde799b041c3e54c4a1714ead3aa67a47b5