Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 08:57

General

  • Target

    7f4e1477d11492948e76e75f3f616f14.pdf

  • Size

    29KB

  • MD5

    7f4e1477d11492948e76e75f3f616f14

  • SHA1

    c31844c5e6f1b74e62e2a986f8e498c0c8674012

  • SHA256

    2dc4a410df5d65968d298a07fd469ad03a94501813fd4600bd15a5d90d8fc8ed

  • SHA512

    6c81fe5c6febff2c73b47242c26d14c09788c2ea299b72e0962b8ff161f5b51f0900dc738199b6b64b2b8e01bdee758a3ca5503687adf83be0034f6d23833d15

  • SSDEEP

    768:rGSklHTqF4EdKPCISzBj7EqKFZ2HyiWkDr2A31/oR:nklHeFiPBEBjg1/ayHkDBoR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7f4e1477d11492948e76e75f3f616f14.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2032

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5e94d285654c6d2eab45ff7aa344145d

          SHA1

          866a379e885914bc423b1f485190a99d01e9d398

          SHA256

          5aa793765b3b89836ede5bc5f58e772c79a21f009f317af5521f120ff0a8dbe2

          SHA512

          d678cd69d995426963581bd8554eae7e514bbfdcb870b292d933424bfc9e5aa728ba0653b2f95493af59d23a8bfc2826cc5318a811e7c12f9912da3959d9414d