Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 21:53

General

  • Target

    04e7dbe86fb6c87b7c15e9d46c152300.pdf

  • Size

    85KB

  • MD5

    04e7dbe86fb6c87b7c15e9d46c152300

  • SHA1

    91c89a22e14a6702ad27bca68a6a30d566cd39e0

  • SHA256

    e2b685fde1f070371ae2625b247d0048807004a86c627ade0f3b847b5bbba290

  • SHA512

    51bfbc86c2b0387a3820db3b17a08f1af5bbb6c506cc5382f043b7d441ef00032b75882ce1584c11511ce5fb2c7b45c83971ac01890982afe577f58785b18967

  • SSDEEP

    1536:pvdwFBF5rX+x6GCcmWHBxhN/l32W8h0Mj7n3q7HnXGDCVwWOpOwrKWn+5Ji1M:8LlX66GD/3yh/73qjHVNwrZMJR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\04e7dbe86fb6c87b7c15e9d46c152300.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e919a4fac1ba7f6b974dce073c29ad22

    SHA1

    c4a7cd3e900a959d0b6c058068343ce825bee289

    SHA256

    5805c24beb4663830c4edd6e182c19c84fff5b0ca38c7f9d641a411ba305c018

    SHA512

    2840bfb701aea15e22bffc925576a78cac6db2094eed9abc6a8d11c203b61acc0c138d3242a0937e5f895b66ca23df57cd020df3ae91279b5e42fcadf91ad6dc