Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    24-06-2024 19:01

General

  • Target

    文件.pdf

  • Size

    113KB

  • MD5

    ff4feb48514b776020e4c1e68822dc64

  • SHA1

    3111cc6c28d4b7555252c2eee2fe408b735831bf

  • SHA256

    83c911026e98bd1eb6ffb02005d7528ba125cacc70e931af484297da74ed926c

  • SHA512

    255c6197e4ce145da85974d579486770dbbd46459fd60995d4772aa8b1da100fcc1abe2c3baaad55e9764b206d8ec4a62c5d50d89645079c4dfbdb23154511d0

  • SSDEEP

    3072:WGwg/twUNd01i+ea/co8kUXGnURsl9ghxg7V:Wk1wya/gRsmgh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\文件.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0e624ba5b5ef75534b03e3037502cbdb

    SHA1

    6648d5a5bb66bad03dea5db331c1f119e76b0a43

    SHA256

    17aab70859df5e398575ed2b73deca6cde07224e55343f5b25c548679366f77d

    SHA512

    fd10e11a32717497087bea2fdb15bb3b388f146349dc20bbbd0736d0af6bba10bc6e953f918fed3f7069f7085c411f4135f5549ad6262f07f4a39843039fd24e