Analysis

  • max time kernel
    119s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    20-07-2024 03:06

General

  • Target

    4082d9fe23527c60856352c5610cc3f0N.pdf

  • Size

    685KB

  • MD5

    4082d9fe23527c60856352c5610cc3f0

  • SHA1

    d7f9efd63b5df82c29dbdc6289fd845234321611

  • SHA256

    85b3d0e1d8ccd39dd11fff0ddd852c9c85f2a0b35ff62c30afd7815fd348e675

  • SHA512

    454027fd80dd678b4cede90370ab873161b70114e3ddac482efb367fd31f6fb8fa8c97e63a111e56274a3df9d288b58389217a71ea41e277daf0265c44b11de9

  • SSDEEP

    12288:nKdROalvctqcJU1Y83WAV1TMwAdGWMm0CmFjNFWbC5mRvo2MPCHakh2hRb6R/+:nyoBU1hMw0GlEU3WF5o2MWL4X+R2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4082d9fe23527c60856352c5610cc3f0N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    032296d3d47fc60313c4d52fc6ca5c95

    SHA1

    7187e64716effab7b748a8dd85bb129ee4887301

    SHA256

    ad8e1cbe92969a767e15297b94777b2a1f96f182e7deb5854f682d0b15292174

    SHA512

    793e0675fbc4827675d3456c7856ffe9229953417a7a16f17656b08616bf1fda09d5897ab869b9b562d2b87d71b21f88e4fd42dae227320e53fa0d250f1692aa