Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    30-05-2024 12:58

General

  • Target

    Notice_24703873.pdf

  • Size

    50KB

  • MD5

    b4533384cf17d23b4e4d25309f96b246

  • SHA1

    51732f2a8b4b0b9edfc19417de601bea33edab47

  • SHA256

    a8603ec0e0e7606ffd11a186a37a6097c8a878952649cc9a4bdcedb292996e12

  • SHA512

    e0bb0b64005e971b089deb83286e201a01efd3d792f96cb918782bd933ad2efad3531a28693d78124741e9d75c72f65ed9b5963f1149af8e8e2d4c2a18765dd6

  • SSDEEP

    1536:8p3k9QHVuW1a5/Us07RCuRqWwa8J/YTIwm:mD7IPeSf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Notice_24703873.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    44aa9f6c0a0ea902a29bcbc4e96e35d8

    SHA1

    0c751487b7cb74caa130614857bfb49782d7cb5f

    SHA256

    917da474394b509a684ca61ce9a3d6a58e945fb25c8d7d11f76dda26f8832fdc

    SHA512

    e6ef69eb9e0480d9508aaaac302e74e77c1c595e5b4a8770c85f1979a4fe3acc201c417532b53ff70993dd3e2c3f9fa30b21fa747a6b1e9e61ed344ed327e008