Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2024, 12:01

General

  • Target

    info-06-2025-jHeqDdnhKp.pdf

  • Size

    218KB

  • MD5

    d487678468d2adca8c60daa35a807be9

  • SHA1

    b1eb52aa079d2bb25b9a01886259d9eeeac471cd

  • SHA256

    6e4ea0a3644e5e60ab6303585883af207660b52cd056f1cb3be19d93f9675ec8

  • SHA512

    412ed1a398b2f7609c29fd61d9bc24968c9b661d40aa41dc3ef712c272a0e7ef000a0d10cf644dda4b0e74bad9d1545d41dfce7d7c4e636cb3623782fdd3f074

  • SSDEEP

    3072:sM2K3pPA6Bb1vwHx1OEt/m2AqaOzCFb+fzvCVraVxnboZ7jyR8uwYCNp+iRyM0yQ:PxA8bsxT4qLcb+qraLoZHi8uw1p+ZM0z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\info-06-2025-jHeqDdnhKp.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f63fde428a80dfdb955cae7e0f181b0e

    SHA1

    3c5625b221cae7a844389009e1f52ebd9b095449

    SHA256

    608fefe62cd9a9f050c0085da26e262b5e603d6986c7c2c595f7f9c14e9d3629

    SHA512

    89481490c00f196928b9d4ea329925520274a3d3f19e08178cfab81e1af6e344720b9b0e1052b84a92281aba3a3cd3d00702889f5a24fc69db79e187bc3b7bff