Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 02:43

General

  • Target

    4d7b68b56bde229617b4a42004b7b632.pdf

  • Size

    85KB

  • MD5

    4d7b68b56bde229617b4a42004b7b632

  • SHA1

    3c7b2881401193f82455556a2149765b98cc745a

  • SHA256

    34ee1a07db4564145894b6fbfdef25f85cde09bc1651bbf7b02c88a3e8ff1518

  • SHA512

    e1fd250aa77aafdadf01e870d1794f8a38b9dc2c4b87f4e264c4760735d37b197841e1101d6ad01df41d5c248ea54d3c91ce8acdf49fdd493a57dbc0fc50b58c

  • SSDEEP

    1536:1iSSv0QhyzVe471XKU+L9Dl5F90U97RLs0KDNlLcQEjPDkWApOquWowrTKjvUMxo:byYJhaDLH90w7604NlgQGDTqH6jMMxo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d7b68b56bde229617b4a42004b7b632.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1640

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8cfc647325d9ca401e4209607251d34d

          SHA1

          0f63d9695061b05db75f3b9fbb8c469325a6f067

          SHA256

          84eaec5e667f81e96cfac05bfbd4a2961e72c2401d2b6fd00d26f1b37d69179d

          SHA512

          be7748773c3b52a030b946281eb942861fce083cf360e62fd98ecbca871d80aa27f410600c219f1fc27ab69d1a1350f6d707b4c704dd3f946cad3488065b0bf3