Analysis

  • max time kernel
    150s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    08/02/2023, 17:28

General

  • Target

    2128A82159EF5F38F558622F77EB7E76BA1F65F82309AE5B0D02B8FCB9626072.pdf

  • Size

    109KB

  • MD5

    3da264dfd59dad6b30c0cafbc7eff519

  • SHA1

    7fcd1dbd817894328fcde0ff758d0bf510418b03

  • SHA256

    2128a82159ef5f38f558622f77eb7e76ba1f65f82309ae5b0d02b8fcb9626072

  • SHA512

    9e0a42ca9a538e41523b9d42b721cb4822ba7f1b10a89139a7311ebaea386e174e742887e60838ac13c4493758259cb18e2a9ee65a8ab918dcf0ab68292b5e75

  • SSDEEP

    3072:sW2GyYOcvYmSP6hpXgXwgZjtetXM4b7BdIFJ:sW2h2ScggD1sJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2128A82159EF5F38F558622F77EB7E76BA1F65F82309AE5B0D02B8FCB9626072.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1196-54-0x0000000075F21000-0x0000000075F23000-memory.dmp

    Filesize

    8KB