Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:34

General

  • Target

    084a72d4416e61248647b8f9c3faa435.pdf

  • Size

    81KB

  • MD5

    084a72d4416e61248647b8f9c3faa435

  • SHA1

    77141e76ddac99569519280d307b8d8beecb8e77

  • SHA256

    e7a7133411bc41d17daef7cb3f294a7e665250d7c256489c95f33b80169d41a9

  • SHA512

    5a8b84d30f06972799a020e9202c02eeb8045d4093a2327b254c565455763f7b92540d8cec292e2ace6baee723369c4a669bffae133b23c1e088dd577d53e5a5

  • SSDEEP

    1536:77NIGeMkGQgzD8RbVHSqLWGSDYbQ1HbAPl+0qO7VoDWkNpOPaW0/K9Ll4c9miZ1k:HNTtQgzoRbVrSzDNtAFto0PCKBld9fCP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\084a72d4416e61248647b8f9c3faa435.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1572

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          00573d49311ec8dd0a985d9ad18ddfed

          SHA1

          84f27b65b15fcff1c7af8395284cd7810ffc8592

          SHA256

          8d008d04ceea467e490e396c2ed35813511522dbf49e6f41cd288ef7467b4edc

          SHA512

          1fe490a48b0101a575a287520db52d9f9e6002f7238b6672ada6159fe51e516e2da27424625e8427de06a0c0c7a1c40dcda78bf689a809365c8179b28cf39acb