Analysis

  • max time kernel
    96s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 14:07

General

  • Target

    00832d8bb61a011e147995e3be7aa8f0N.pdf

  • Size

    168KB

  • MD5

    00832d8bb61a011e147995e3be7aa8f0

  • SHA1

    5d52758e2bb7362f348932417c15e810c6bc4519

  • SHA256

    4a1d4986c30384359d10b1f8733e2748ba62ddf016cd54853b91f4dd8b83748e

  • SHA512

    3a9f1c3e5e8ba546f5eff397b080f96f896b2c771e80c359cab4dc7bdeb0d88af75df1dc51cf19b1f0e61f20180752cf5b6cfab9f20bb88c03bf7ba919ed5b3e

  • SSDEEP

    3072:dWGUyh0IhRJit8zeYJlzYuyxXXixnnknMvJt2bFdMDkp19JyM:dWJrczi2EHxXXixnnknMvJCFdM67t

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00832d8bb61a011e147995e3be7aa8f0N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b68099cc0177d5ce132c0ee0d74ba103

    SHA1

    5cd9a63a43f02baf32c2a59c354276d78f7e061c

    SHA256

    f6038c0791b9f29c14d03d3b2acbbb6decd5b24c7f763aa1ff8db4b98904a52e

    SHA512

    7548e0bc8c60b06127f72e7d45008fc766e7414a24ce30096d68394286dffb49777be705d1875393813875e30d35490f344f65e8ada4023783cae58e7cb0fe36