Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:29

General

  • Target

    007d98a4969b3e87b75ea4a831dc5aba.pdf

  • Size

    49KB

  • MD5

    007d98a4969b3e87b75ea4a831dc5aba

  • SHA1

    1c1ae30e74e6ba2dca0e4aaaa43da5eb9084b776

  • SHA256

    7114ed16daf5118e230c7b4760e1bfa12d9177d8ac4ec063719be2bd3475826f

  • SHA512

    3345e1d10ed411b3bd808274cd8aa967fde8b33ff1613ef9d0097aa586b607c320fd3db187f161bada165cb043ed46357111836a3cf2c5cae8d454b45cc3af0a

  • SSDEEP

    768:4fJ+cpjKLOkKMcVRLlfiNMchu4bSUoL2ADGwlR2E6v4PvLH4KYLpf4gsl:Q+ekv+RLs9hu4b8L2ADM6bzYCgsl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\007d98a4969b3e87b75ea4a831dc5aba.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0c9b249297d037e232aed67d8e1c2f46

          SHA1

          54a81dd3c76da947f4bdc6cea3e6c2466523db12

          SHA256

          1ef13222d2e70be9915394f67f6b56e34f62bac959c390eb2f2e7727a5c859c5

          SHA512

          bf4e8886d7ed32d79502a73ac84c4c0a1ed6290e50a6a051c1efff183c66911fba90c9ec3edcd0d5199531e0f7a5801cd79370c918b18f88f67275db7e198bc4