Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    27/03/2024, 10:18

General

  • Target

    f4904d73f80da274a5e4aa720804cb8f935ee513def97e25ccaea4b445b67592.pdf

  • Size

    99KB

  • MD5

    a7f202e11005c56bd53527fee68fbade

  • SHA1

    98d2bdb5f907beae32c45c85f328ad0c26e570a0

  • SHA256

    f4904d73f80da274a5e4aa720804cb8f935ee513def97e25ccaea4b445b67592

  • SHA512

    407bfdde042cbfb83412fe65829946b2b08c12808963423b640cec78e9182b95d72f4bbb131bd4a390033a7d8ee994bb44f8e14796ecd195130d6aff8496ab74

  • SSDEEP

    3072:5eOcJGORh8SrTyQFig0y6PNqhoqUBRb4g8l:5eaORh8EGQFpEN5dpE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f4904d73f80da274a5e4aa720804cb8f935ee513def97e25ccaea4b445b67592.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          79f2a48ccf88d29b39fae6d009d35aa8

          SHA1

          40e21385f51aada4febd95e2f8c2116347a55a21

          SHA256

          95714da126a3039491ed3ea99c4009b7903c8161c7670cb09e23cac29611651d

          SHA512

          0c6c7992c598c5e2cc3319af56b48062d39188084e49ffdb973122281eaf111bff1e2fbed4a94b9b21743020e0735bd20e6bf88b1fcc149801c5e0bf725cbef3