Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 14:24

General

  • Target

    d7de68febbbdb72ff820f6554afb464b5c204c434faa6ffe9b4daf6b691d535f.pdf

  • Size

    398KB

  • MD5

    43f4c17f0851fc882b6d9fb588d141f2

  • SHA1

    1daeb5f0383ce4c9cce280bf607a17abeaf1ddec

  • SHA256

    d7de68febbbdb72ff820f6554afb464b5c204c434faa6ffe9b4daf6b691d535f

  • SHA512

    63c9a9288b87a7444751074383799e7b45ba08492b0654eb32dbb08a3c7ca66f260b6e51e559cb09a53480f8e8d3aa236312cc2f17e938d25567bda5ff15a002

  • SSDEEP

    6144:4opV4Esoz7o9DkR2rIRSg+QGiXNeWlcrALaifkSLnSpv2VNff/NwOfYFI:XVCoX8ERx+KXNzBLTTbM8H/NjwFI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d7de68febbbdb72ff820f6554afb464b5c204c434faa6ffe9b4daf6b691d535f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a39eacc60c8bcbca21bb07292486df72

    SHA1

    16e076252a7d5b2739988e7b4674a09c97da6abf

    SHA256

    71354b4f1fbf3a115a0052bb1f49ed002d0f6da27ca5d53803d44fda9a216d50

    SHA512

    239d881c309f48e9a7f108568deabb9d03d56946f76f661dc0d9694460c586022b26c7be986ba22fc34ae728fb3855900e1a9ce7a40c5cd363c7e6b7ed1fd8cb