Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    15-07-2024 06:12

General

  • Target

    984fecf0f330e0df87035fff249f7780N.pdf

  • Size

    613KB

  • MD5

    984fecf0f330e0df87035fff249f7780

  • SHA1

    4080a90fb9960c3dded1b63f59e78de13826118f

  • SHA256

    088877e758bad1ec2085a25f21ef7134e11e357e136b5b399aa0cfe20452d24d

  • SHA512

    519d1ccdd9f15d39314b1dc22d4af15a770df18b92cf0a65bd76f7d6d5a388c1a8b67f4ce7c52acd74bf029b142e7b13073d5d7ac833137d773debd39090dd60

  • SSDEEP

    12288:X60yCMPig4LNsAJFJSI/be3G5WXykUqd5u081r60Ma+kMRE1DiIR:XVsig4LNVH3be3gQUMM60Ma+2plR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\984fecf0f330e0df87035fff249f7780N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5f2800bdb923389355c41ee577888c80

    SHA1

    9648286371181ac4ed663d719a176757c242b8cb

    SHA256

    250f675d4647165d34d165cf45419388099549bfef52f942e4e95da155204e1a

    SHA512

    3d1207c3a326efc18356ff7d3ded44cb4b0630eea5e7f9ec978556a268ea16478a56a42159b05c7b06a14bcce7f6b570e314f0647ff5974273135f08c35e1e2a