Analysis

  • max time kernel
    122s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 15:29

General

  • Target

    78ffc07eb49dd13dda7956ec43fe9d4a.pdf

  • Size

    94KB

  • MD5

    78ffc07eb49dd13dda7956ec43fe9d4a

  • SHA1

    ed15b535b02872ba76361f1a79d42b3fc1c0ca25

  • SHA256

    c020692dc5734f515520258205e5201f53341b581c195b8a9214ef38b659cc20

  • SHA512

    6cda0cd39bec7dcd7a1b527780312203e71a3ab6e644ac85fa19cea86191ced7d626fd9c5e5a9bf3d18561e87d9e157f8b1151b955ad7b5d0c66a6d857d262df

  • SSDEEP

    1536:S4tlISduP8iwH5apBTfQJxmzCTB24t6G07cgR3gkJcs0ibBORPphlSNWFC9zfutT:9lRu0iY47Qfx70/7cvkJwiiRVsutHPK+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\78ffc07eb49dd13dda7956ec43fe9d4a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    17271e28487ac47003a928e8fcca4965

    SHA1

    0dd51113997c4683a36de83000dae64e169fef1a

    SHA256

    67bb883b29e6e50cd5531c2bbc087cb5e1089e7e6f02d01a6ac45f75ec7cc05d

    SHA512

    f13a83c392331f9afbd83a67a4dfb172019f706e098afe36ec8c2075540513b5a9d15feb484f6cdee931969bc7b864251bb456dc90cb45aae21fd82e37e0748d