Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-03-2024 03:37

General

  • Target

    c4e07c64364333df3750a53e9091a30b.pdf

  • Size

    93KB

  • MD5

    c4e07c64364333df3750a53e9091a30b

  • SHA1

    43ae6d12864dd40a1130ffb815f740e0836bed03

  • SHA256

    cdf6373cc0d7d03b0de7e0d7818f3df73755ba8fb296dc4552939ce74db76e8c

  • SHA512

    0a47c8db85df4e25d60ffca47bee6380534cb10e06cbbda04c90f65e42d3b37a359c6edd9d7e7dc06a77d1407a56f11e529b52f2ebe3994f87b3efe66bf9374e

  • SSDEEP

    1536:cSXTjIwCdxix2NGVS6lN3fcwFVYLfjuviO2JLYcwXCrW6pOu26Wc73vSJ8c23Qe:HTjI5dxwWK5v3RMSiWawu2WaJ92F

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c4e07c64364333df3750a53e9091a30b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0b3985fd0f856332f41cb352986a79cd

    SHA1

    ed7c5b525c1d7396e684946592826c7c8b66e23e

    SHA256

    30c956d652c9a4cdeb9b5cb820ab8e3d124c6159199761b2a0a0b80b78bfdd17

    SHA512

    d54c5097d156d4e3cfbee96ba25417b358996ee64b41aef56607dc39cc0955c4202daf9e1ea478a2dec4e8920d7595db64120848c874cf6410ec366f3aa9927e