Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 15:02

General

  • Target

    779e79456330c57f4007cb76f121642d.pdf

  • Size

    38KB

  • MD5

    779e79456330c57f4007cb76f121642d

  • SHA1

    d46d62ffcba4a7184a032621967bc71d155ae35b

  • SHA256

    ed705d58fe271253c3f0f749114b81216fa5a1e308be7a2bc49b8aa1675231e3

  • SHA512

    d327b5a3e6c90113ff833d58a4c3b4039f008be9edec61c4b9afdb9bee51ecbddc481ab746e7f82f246b9040cefe5b1f04ea1564740fa75d591e11c9ab61436b

  • SSDEEP

    768:j/f4bdWDiB3gu+wTnU/KMPVu3j+sNj+Ilc5oaswFS+gvb28AOnhDXhU2XCM3NKl:jn4oDi1GlSGuPNjdl9AIvS8AyhDxUA32

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\779e79456330c57f4007cb76f121642d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f0a603bf2818d45717f5741a5d9fd566

    SHA1

    e333bba2d1cd6c09dc1c5279fe12bc683b97163f

    SHA256

    0c1bc3c3417280953e2b9731128488630c726538a6e71e1bee5116959cc63586

    SHA512

    b049e00f1c8ec1121ee6574de84870160bdb5eba8b81764d1f7bda986c675476cd2d194b34eb9da29285d5d6ceab6d557949578f0b53cd98611b352aeea36610