Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 16:23

General

  • Target

    4504ad61aaf78370357f21473d3e88b0N.pdf

  • Size

    461KB

  • MD5

    4504ad61aaf78370357f21473d3e88b0

  • SHA1

    9105b0c34ac68d5b8be3a064ee780403212af65d

  • SHA256

    691f7330289931245de8a0060cb527398b3590a06e878ee03f957838a0991d9b

  • SHA512

    c3d58cb308249a484281a773168baca622508adeef03ee5c1ef2401d5a62c3eeb0614cdc4737dba87492ed6200fd72d2fe992f96ae10a394c6bd7ddd9eadc9bc

  • SSDEEP

    6144:PvPr6c0FrJrAUPN94vR3UAboU1+5VphjlLMp1eDUq0jdvzn6C9bpQoiA85:vWDFFrAUPSR3j25VptlqkUNJzbqYG

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4504ad61aaf78370357f21473d3e88b0N.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:580

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b30d5b5b59af6451d10060b24cf976a8

    SHA1

    a72a5ef21a51e5166b70d9fbf56df60f83fe73e7

    SHA256

    73d817a7f44a6e127904321742d384dc68ea536221c5f60fef8d40fba1676b66

    SHA512

    44a636f155b85e8ddf212826e8f37c70addcb68e5e722c965547799c9b113e065ac3879099fc2257c6df6990b32c98ab02bb7c99271a31499c66f86b134501be