Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 08:31

General

  • Target

    IMG311105718.pdf

  • Size

    82KB

  • MD5

    73b3243c227db3aeeacf436cc6e78a89

  • SHA1

    c39d3559cdf703a4a186275bd3aa77499efa9c8e

  • SHA256

    04f3780253853a42695af722f7565583724da849f55b7101e225a8857f796e28

  • SHA512

    3771d0fe2bcf57534dc7c114b7683d1df61ba06555c476a3bd08566e78fdc34418c9975e66814e04e30499cf4b2d57b468028ad8c31e28861e90b518f547ee82

  • SSDEEP

    1536:spD2X6YCtKxHVZC3pyoE2BAoLi3cChiOEjejYXwjrQRNCWj/8rRayCUsfSm:eqetKxHV42oeMIjjYGrQ6WyayCUsfV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\IMG311105718.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    94fc293c48698fd17a65ff3b138482e1

    SHA1

    09234eecd04d89a48e210c8acb210f15aadaabbc

    SHA256

    4497b2a40a65521eb6119582ec797712d02776cf58c4f20b42d26f53f286390f

    SHA512

    3c2cb2446e94d02059abeb1722305cbed0c416e47cf4d07d85813ade5d32bb55b49085c224fbb0dcbd3fe701726e2394ec8597b858fd9a407a0780069572c6a9