Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:54

General

  • Target

    1074cf22cff0a7a330b4a0a1329557b4.pdf

  • Size

    73KB

  • MD5

    1074cf22cff0a7a330b4a0a1329557b4

  • SHA1

    fa7c06da02c72957818b20b8026029ecc5ffe21d

  • SHA256

    eb823b85bd2449d2be13ec16b6f9ca7473d23738599042cd4d0f421ae3d77b55

  • SHA512

    315de963b484cf3c78ad0084839df42b3c6742d37aa894c250e9c7a4f581392d052ef165ed680684e442de30458e296da64b7566f7727fcdecc9624946d3a206

  • SSDEEP

    1536:840a3oRrwkjRlPo6eZz9/zEUETbjDPG12vxZHWnpO31swImWK8BsQk:GaQskjRlk/zDSbjq125r31lI88B0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1074cf22cff0a7a330b4a0a1329557b4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8488de0a87a6f4e23fa31db3cad3701d

          SHA1

          8eb1b024442690ff0c57bd5b469a8cf7d3f9e668

          SHA256

          2cf2054c6eb09b7788cf7e2c663c331a23e6cf107cd4cb88fecd4054340b7cfb

          SHA512

          77953412e4de18be1f870cf17154edbf07e63b30425576b98f713f1bbcc15642f1cf05e47e2fdffa6b0a004ff322c8b1c317d1317fd099870662d4b7a77a2b15