Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28-12-2023 20:59

General

  • Target

    f7d2b2b1daa79ccac0dcf9d592c47c0f.pdf

  • Size

    91KB

  • MD5

    f7d2b2b1daa79ccac0dcf9d592c47c0f

  • SHA1

    39e0d9c0fe21fc5ef7aceffc92268f7bf5e90c74

  • SHA256

    49fb79a7eac2207eab91f42f4c0a6b6d26237ef605c966146be18bda6701aeff

  • SHA512

    7c3bebd310af9390a93240aadf22b2d0af280a04b4eba2bc8bb3f4744674f30c9d0976bbf8f80fc7795f524604cdd3853bc3b42579270a89aac3c277ef590853

  • SSDEEP

    1536:zsZVt6WKfLMiX0xMEwHBEDzsNu/hUZ32RupaV+30OQWCpOViHWsGEv9aFnFWVvXB:wZVtRKD5ESszswZE32IiihViEEv9al8p

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f7d2b2b1daa79ccac0dcf9d592c47c0f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9c0f835e879fc38c892074e97c64eea6

    SHA1

    ae0969e0862f3e1c717038871f53f893985a4378

    SHA256

    2ebd297b880b8a34a6df827ddcf04a3008e5edf1fc892c777912de42b655f211

    SHA512

    37a57e6245f7631ac3c92b60c76638a32b39665de5bb55424380e5467556275b09fbe11a85c3018d165f9dee6f717a5661287c5728b177fe2aef92375e7f6194