Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 01:10

General

  • Target

    f4334da4bff8569226ebe15d5191238c2b36e9c6cabd772edb1e70ece53fc214.pdf

  • Size

    331KB

  • MD5

    2cc9f89200d88a7178ba0e700f97195f

  • SHA1

    47c8f3988a1c69aebdf7da366f24a87c957bcccd

  • SHA256

    f4334da4bff8569226ebe15d5191238c2b36e9c6cabd772edb1e70ece53fc214

  • SHA512

    01b9719a8aa996e80ff006c43e3a540a6f8df02d92715be8234c6ab79a5d1bcaf29ce72874ea9dc8f252fabed62b211697a329adcb827c1ac414f9e216cc04be

  • SSDEEP

    6144:OqPg1ay4J2tUwqg872fvZzBOLWfuVcsrvFl/G2lGHlk8J2Zck:OqoUyyH9g87QhzBOLWmVF+3BRk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f4334da4bff8569226ebe15d5191238c2b36e9c6cabd772edb1e70ece53fc214.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4a60ac82839c91a82aa46fb030e5ffad

    SHA1

    cf5e0554ab7a34e5eee4bd60531b7beef51b22af

    SHA256

    31d00f49a29bed571f73b12e5504f55ce32b3a89812d967250f7fde99667089a

    SHA512

    d60a24dd8c372a2582a4e733abd7946b5a5414cf94f0186b675ac67af60a6cc72baf18a7230e02cb543b278712281bac7698ec2e5dbaa7bb402b3ee008792837