Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 14:28

General

  • Target

    7597f87cbdd4612d8f3c4156479070f3.pdf

  • Size

    62KB

  • MD5

    7597f87cbdd4612d8f3c4156479070f3

  • SHA1

    ac91710ac16081270157b335f467064b3192e4ca

  • SHA256

    5a0646a21fb7ce4a6cb8c0256a3edd9ad5ae1ba61fea2df550469d7f76fbd41e

  • SHA512

    dcf47bebf029abaf68721f228e7b1e4254a7cb8f263d01c16b57463a269bf59d1cbbf2517df8c6c29e1f3e62b972f2134adaaf4fd941f1fca6689771ab1e6ccc

  • SSDEEP

    1536:BKEb25eJK5bj6BDK3+SXYCVFiXdf9HhCsfI59GkqfL+vL5VMsDiaoo:040NvF8f9HXfIi6v1PDiaoo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7597f87cbdd4612d8f3c4156479070f3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8d8a26c74427804056ebcb7ac9796698

    SHA1

    e8d633a7b4eed5b64b70014d18aa50e28d01fd35

    SHA256

    84a0532db98a7aa50e92fbebda7c71f0ac7216771cfb250927b941d2a25ef7b4

    SHA512

    410aad35eeac84da51edfb4f6dd812dc9c47a004d3686a41a943be77ec4c00c543630b49e7a24aa5c4c1254bdc6ed70b78cdcd46a7cb6e19618b2afb0e5f7983