Analysis

  • max time kernel
    118s
  • max time network
    156s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 11:40

General

  • Target

    1760cf81e1828d50021a4ff1e403f164.pdf

  • Size

    91KB

  • MD5

    1760cf81e1828d50021a4ff1e403f164

  • SHA1

    c37a6cc96c2d5e910dc2395b97c1d5df10a0810f

  • SHA256

    4fce0dcca89053135a9ad27fc3d99b26a0035898865aca57db0f315c02a5a6cd

  • SHA512

    87ae61b217fde78bb6d12cf79d4aa58a7b6163215dfcaf6c532d3d584ad11eedca2ff9096d469e06c453d6eb6b2cfac9c830de1cfa667170bdd86f240907d114

  • SSDEEP

    1536:RvMOyqUTHqogYu430Zb2+TjHQD2MiADD1wty6zcJyBkEj9zEhfgjxWdGWiPjILid:SOyNTFgYcZb2+TjHzADDyym6Ej+hfmxd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1760cf81e1828d50021a4ff1e403f164.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b8c8acb45a22cd52daed6de463d10de4

    SHA1

    7a3048e52086070157691df7bce2a205553f736d

    SHA256

    636c7fc44bf317097ff5a16e180933b3b79c66cf627b43f7e74df528eb8cbc00

    SHA512

    0332ed274a0820293a8a45c07b1bd62a1e5ba9aec1e28024c541c69f1bb83e6ec32bc0629b78660d7639f155c30faad9f6763413efd9db789c798aa61cd09eba