Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 23:42

General

  • Target

    7b41e9a11521292a67ca4b8e3d1bc8627e28f52dbae9404b0081f28033d7c828.pdf

  • Size

    466KB

  • MD5

    b1d4e0a8bbf01cecf24903d123251678

  • SHA1

    f51b938714730570f368a95f880fde292317a799

  • SHA256

    7b41e9a11521292a67ca4b8e3d1bc8627e28f52dbae9404b0081f28033d7c828

  • SHA512

    e49fce95babfb4ae97a2a6f908af87451141cddd77c87a4d2db7d934d415e85278772bbf62355056dc3bae03610dbd0420f1d813f11cc4703f54995fbb4547c9

  • SSDEEP

    12288:Gz2rRjdhOaRRMesT9mpfClrXfVmco2933:DHT8T9mfKLf8D293

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7b41e9a11521292a67ca4b8e3d1bc8627e28f52dbae9404b0081f28033d7c828.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2632

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e5487b7aacaad5fecb2875bb4ed9effb

          SHA1

          7743a5016cafca44a8d3c9fd2a6025cb564b1250

          SHA256

          fc087f7733c8c560ed6922ec72af58fadb327fc9a7cce43ea474f08ba7161f28

          SHA512

          b68dad554993ab0eb7722344d808e24d1394fdc56cddb691f4f8df689c0a74262faecf1f21b88260c155d95a2b3b523cd00df5c922e4793edd2398a695e6cfc2