Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
27-03-2024 16:56
Behavioral task
behavioral1
Sample
9749853c3f9772b7ec689af6ea731bcc30852fe2a2610501f0e397d6d59a008a.pdf
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9749853c3f9772b7ec689af6ea731bcc30852fe2a2610501f0e397d6d59a008a.pdf
Resource
win10v2004-20240226-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
9749853c3f9772b7ec689af6ea731bcc30852fe2a2610501f0e397d6d59a008a.pdf
-
Size
52KB
-
MD5
b590a9fd49915e51f10ff25ee8952611
-
SHA1
2ed5611dfbc0d51f3a24d9c23cac29e1987f3856
-
SHA256
9749853c3f9772b7ec689af6ea731bcc30852fe2a2610501f0e397d6d59a008a
-
SHA512
18a105555a3a5239f5c29d4fcb9cf77f5da7829055502a251f76aa2373657b165af6f443d9f59417942c6182c855544bd764d98be2f5a112a8687360a584a447
-
SSDEEP
384:/W/5555555558F67cdOr9wavSN/Bi36livBu5vNMV0:/W/555555555+KhGwQjMV0
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1716 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1716 AcroRd32.exe 1716 AcroRd32.exe 1716 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9749853c3f9772b7ec689af6ea731bcc30852fe2a2610501f0e397d6d59a008a.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1716