Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 05:20

General

  • Target

    70d75f20e8bf98594520f817056ff861.pdf

  • Size

    35KB

  • MD5

    70d75f20e8bf98594520f817056ff861

  • SHA1

    e7760f8122dcceab4fa257fde4d7e16d67748f2c

  • SHA256

    7ccb3734841d78d15ff7f9d6675697ccee3e6bca80ee8add871442c83e8409f4

  • SHA512

    ca6eac3472993e00752f634f4ad3ce4d0a438d9c20296145a4a108e022dd71a303eca7092d7322698b5b42e7ed454b6f08bc46659e760780c6e973692d4bae1a

  • SSDEEP

    768:YGGozrV4hJWOusB5ifZGt6LkVgr2w8A9HzGEk6CL9YYuFv+1vTrwe4n:YGGgVkjyhApVif9HzGpviYE+1Lrwe4n

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\70d75f20e8bf98594520f817056ff861.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    daaa725da592276db667325e86011338

    SHA1

    3c1588b56c90819c3506d57a68e0a2afb7f0a7e3

    SHA256

    1bb395751454a564bad2204aacd976b187dffd232b37654263444d716539ce3f

    SHA512

    c898dfea4e73b3a9ae16e1ff9ef9b79dd996b644c34b1efca2d5862d91ab3df6631131194bc385f78fb2c2e7452e2fc2585295094324f49e2e4be359f6853c23