Analysis

  • max time kernel
    150s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    13-09-2022 18:45

General

  • Target

    c378670dbf9ace2d4ab1a42bc7aa4468d1d932aeab312da7dee03629696252d5.pdf

  • Size

    3.2MB

  • MD5

    e1cf75e2bac01556b11aeeb6f14bdf75

  • SHA1

    0f950937b49f6825ddf8090e777d6fbd6c63f40b

  • SHA256

    c378670dbf9ace2d4ab1a42bc7aa4468d1d932aeab312da7dee03629696252d5

  • SHA512

    2137018a09cd370ddd4c84682f1b874e8162bd174f0ebb9df8e99534c7b5d0687e475a984b2b8d5eb5358908f0ef3972b8dc904ebba32a7e7729dfb34a4fd398

  • SSDEEP

    98304:lAo7XU2jxH5OONPe2RScaat70ClmOKmcRQL1wPhQ8PX:qSE2jxH5OOZaE70PwcO5CQ8PX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c378670dbf9ace2d4ab1a42bc7aa4468d1d932aeab312da7dee03629696252d5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/812-54-0x0000000075131000-0x0000000075133000-memory.dmp

    Filesize

    8KB