Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 00:01

General

  • Target

    d4b3788906e2f21b707b660c6b7ad51a.pdf

  • Size

    85KB

  • MD5

    d4b3788906e2f21b707b660c6b7ad51a

  • SHA1

    09ab0f1c8cc4a06261a1444c1d9d562e2d59a990

  • SHA256

    d0b6568f5938b8abf4349adc859c316c2df21c9527a7657da79d4de33c8443b3

  • SHA512

    8ff4f05721be32ceba1f025ae81e8cbeb77baba68a481cb25a914a205a13b5441fa91eff5086024cabc089f83627ff439b6019d43a526dddcacb8f980c40f130

  • SSDEEP

    1536:grbn4PDLt2pFb5ghiQas+8JoRMk5XQOWEosyEmQYW6pOu2G6unrz:kbn4P3eAiQeeaBqKoamQhu2G6un

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d4b3788906e2f21b707b660c6b7ad51a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    900d7d3a4c86155824a220d0b2546090

    SHA1

    259bd318323f927265b0e0689286bf78f0ab6a82

    SHA256

    78f8ba91b6703451b12cfe3b07699218d3d02c5a6f436d56c4d61426b19865de

    SHA512

    bb40bcb8e5f3fa9a71e7583541d774ca74a0026f750fc2ee86c877ee873b39725dd9cdb7d5f3387d6ac7a17a0e0f9a58c22ed8b37d4497de42ee3bdaf10d6e19