Analysis

  • max time kernel
    94s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 20:40

General

  • Target

    0644326b167232a956e47b2e19ca6150N.pdf

  • Size

    33KB

  • MD5

    0644326b167232a956e47b2e19ca6150

  • SHA1

    e6be538dc5c662becdc96842767bdf8540404cb1

  • SHA256

    f87e1f22b7290f4332e8474a18be397b8b8792f92d70824e9df62395f88ef668

  • SHA512

    63636ddb55f8499881291c2710b2c69664aa5d7929b2137a26478c1884dc715ba87a332395968b484f8f5c75d95f04edd1243bda456cd0f0c74b5a52256cb437

  • SSDEEP

    768:JHhMyHa9l6MCy+wFMzRKaujz3eS2cWROUT5xVWqiLTpcVNhl+Rs:x23Haaz3fC4UT/iLTpcVos

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0644326b167232a956e47b2e19ca6150N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ea7d2d66730dc4015266ed5fc8f75420

          SHA1

          5c543bf84cee2e78979fabfc3f7c0dae4e80c8ee

          SHA256

          4a85135b8fc7eeab595e750bad9e382e2c0d632f9a030d8f7a9dc88e2f3dc2a1

          SHA512

          9331174263dec915827bfefd5bbb3e0ba505de191f0a5085accc98320af78650e36d574f078734ab28c7e22a67e5884e2bd1fd7d71dde152f4da3218f3b77766