Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 04:32

General

  • Target

    c4fb615370cad73e6a585db637ec05a4.pdf

  • Size

    87KB

  • MD5

    c4fb615370cad73e6a585db637ec05a4

  • SHA1

    8c552995b26212b3b2658efd8cb9ba01c4ff89f3

  • SHA256

    b2877ead5c7953fbac40c084b39bd41c8e78417ca5d4c59b3393e85e67e95a3c

  • SHA512

    058690db8bac90feb25be0e3429be96081c4164e895817645fca334fa778a9b096ef9152f56db29b1e0822f3d8ef0b4998d608960ebd4649ae0cf950adbf489c

  • SSDEEP

    1536:BqhisNE7rwXvUAk4njw/WIe+Wd8GStxxW0z6sKghWOpOwrKWJSB6Z9I1TE:Mhz0Esl4nMbe8GwxHztewrXQ+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c4fb615370cad73e6a585db637ec05a4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5d120c03152853e9d1fd369fb7df087d

          SHA1

          1afc39893d1b470dd0fb8f2765ed63eff4ff069d

          SHA256

          3fb7c6de0c578ab6baa3e7a2fa3bb4fa666de72acb816bf3ff569d13c55107e3

          SHA512

          04db9c8f3435f65cae0ca5c516818a35e33adeca086f994344837eb622e708b1b38948a99212f32c9dc9dc4ef1fcf45c35d63d85e30ea9c9c94dd55b1a80dc39