Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 07:48

General

  • Target

    7ac65abb091e3c15b23af2998e3746f8.pdf

  • Size

    68KB

  • MD5

    7ac65abb091e3c15b23af2998e3746f8

  • SHA1

    d083c8e320becac91cbeb9f8640f8add686ea205

  • SHA256

    212939841918d62cdd4420ea709c438919e2aba3343fb836a50ca0e7feeca467

  • SHA512

    ce7c9b731013880888d2a78870d302acfefaaf79d0c94132f3469ddab387214e907f70e0f6376a846a58ec28b401b48a29a2809e2f35762a97cee2c5a7d5953f

  • SSDEEP

    1536:F+fA1apUtachyHZ4M2DWl1f0Vrwr55ICF0tZJLqssPU9PDuGclk0W:/iUtQ54bDk1f0hwr54BsOPSb2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7ac65abb091e3c15b23af2998e3746f8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1740

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          db4db374234df9bccf61f38bfd53280e

          SHA1

          f419ac27d15450bfe2dbe7856557b9d31389cbcb

          SHA256

          1e521446573f5615d0df5cbf71401e9ace814a0d4d9be0a576ce7b2eeb7a8faa

          SHA512

          c5519fd65c7477d1afaa2ec18788d68f3d5175b398b78a20649194fc89b2c0582703b837aae5473d61a16956a8a2b7ef440527b3a8cd0d3a6f5af6375a1117fd