Analysis

  • max time kernel
    128s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 15:57

General

  • Target

    7ac4b4b9165aad2e13e637d3f85862e6.pdf

  • Size

    89KB

  • MD5

    7ac4b4b9165aad2e13e637d3f85862e6

  • SHA1

    51d76e0661c22600f11f7f6e93919295f2114149

  • SHA256

    173545b3b85949f74816e602a44d1cc775e280a99b99e792a42653cb4eedb3ca

  • SHA512

    38a02baed42548e1278e8839ceff2cd65a0fa2e72e6b768f85b3231fe7988dba565783ac6f1035ede3d62cc2480d8f48f8f9e849a98bbecf629867b6a9415111

  • SSDEEP

    1536:r0kjVdaGxb5nfzsAlNDWht2LXC+7TTRbc3Yxf602yrJqohWkNpOPaWdDmWWvF0LV:Y0da2lftDDWhEv7TTRbv7InPrDmWWvny

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7ac4b4b9165aad2e13e637d3f85862e6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1748

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6174460d202330d3ca0cc1dffdd49cec

          SHA1

          e3035b5dae9d5797e912792887a5b94ea9bb1e1d

          SHA256

          6726a11c7e17605180abd2931d268ced9c8d48cac652472f1ef66f90719ad2e8

          SHA512

          0f179d117a8e730d41e644ba9bca20e34c89e0ded835ed665e5c67b5b3a000c5e0c7730bf3f280008043560c52a08748447c9baa36c166646924bd9e5913b6d2