Analysis

  • max time kernel
    94s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 02:27

General

  • Target

    27fd33ebd6a774df46c5a1b49b915650N.pdf

  • Size

    75KB

  • MD5

    27fd33ebd6a774df46c5a1b49b915650

  • SHA1

    cc49462aaeb7cfd0af2c44426f4cec2bffb80c87

  • SHA256

    41a07708c2dca4253f790dea84af627cb56327bcb67ad9021f41f54e9549a629

  • SHA512

    98df580a9e6d6ab45180ce73d46b39a4f84691f7016382f6bb31e958b6433e35c157253d7187bfd3acb364e7b4cfc94dbaf2116c7e937359439bbc025e31c3ed

  • SSDEEP

    1536:y7fRh8nSm7rmTyQF5cBkQ/4+HMVYH/6bqFXFYli6VwUBXmtcQIsXTNyvW4pO:CRh8SrTyQFikQQ+HzHAhkkwUBWtXX+rA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\27fd33ebd6a774df46c5a1b49b915650N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:904

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a0cab58629eee01059f2b65cf51be7ab

          SHA1

          362ba925591976f0b5ebf8b664f36e7e92ae26e5

          SHA256

          c0d31d0a6f3367aa488d1e2d63478572b16d308ee5337c2a703bd5f263c0fbc0

          SHA512

          5ef55a4b76661fbe3ce2548a91109a56205b257e9550e037e69fb927e47e48a90cbf21fc50e94acb78c08ca90a774c2a6aafbb12c4b6c6aa734ccac6704593d3