Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 14:01

General

  • Target

    740872082497c40c760d46faeba12cb0.pdf

  • Size

    79KB

  • MD5

    740872082497c40c760d46faeba12cb0

  • SHA1

    3dbf08994015f35792b50e580189dfc13ebf28ae

  • SHA256

    e8d8168c0053bdf85b8bf3c7df9703b6e56ba77ddfd902c364484ba18757fe27

  • SHA512

    2896019bafdb4e892ce99f8cd41f38d0a9a8459260280a4edcb58a658c9a9817463fe0cf4542e4331e40baa89c08549ec7c22a492aea658b4a593741f0f431de

  • SSDEEP

    1536:FqlF0d3usI4QHKIL2szungYlHCpAkfUsW22m6MDPuQZWbpONVy9:Ql6d3uH4Q7qrnJF8AiUaIMDWQbNC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\740872082497c40c760d46faeba12cb0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1256

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f742e2dc05c69ea9ebcef82fd68f3e95

    SHA1

    adae2a8da2751b7ea4ed76ebecda8aa6196c001c

    SHA256

    47f321f1c5ca1c5151019d4588c0845ba97404a7f9be0268ddcc87ac6e673743

    SHA512

    816a827240b30ecba32abced88dc38c4902bf9953d99f289b85e0206ff4e5b8f03bf0dda339cefb5ad19a488e630f02fe716fddb673d00e9a99442b3437fc4ab