Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 15:11

General

  • Target

    4b7aa7eca7c390ff75fd3be0dafdffff.pdf

  • Size

    90KB

  • MD5

    4b7aa7eca7c390ff75fd3be0dafdffff

  • SHA1

    7c0b0f8edd826ad0db53a1aeb5f17548bfad9cf7

  • SHA256

    04dfe3c1e4218b1ac429a154763c4819f424a24afdd90803f559061d4f9bff41

  • SHA512

    ef48ec30f23c8fd169a7efee4874a92a40fbad945ff6195342a0b46f2cc16f98a54399a8c82555417e133f906a680ce69a5ca6e92467582e1977add30195a8ed

  • SSDEEP

    1536:4cIOmzEJBE9VPsShcTcQz75TPLrTvgxyM272cMlR/VI0JOKWkNpOPn+O7W2DrpBY:BOSSPsSxUTPLrTvgxyM272cMl5VDmPnq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4b7aa7eca7c390ff75fd3be0dafdffff.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f1ef93bae10dcd67b7a735347c4bfa7a

    SHA1

    25b9c9c821a5acc7c95c1b02bedfb9bcb35220b1

    SHA256

    4de755c0bf4f27e62b77e0c95e9a81485e673ad7f8408bb892c2b88426e65e9f

    SHA512

    7ee18dc533265484e6d230d007511dfcc07fc46bc3b99ce10cdfbbbb504343e4b7dccbe9cba2caff174df72b44a9ebe12d7ead41f5cb3754a54ff2f2123a70c8