Analysis

  • max time kernel
    121s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 23:20

General

  • Target

    422de77575844c5f14c9964b6eb7b8f7.pdf

  • Size

    88KB

  • MD5

    422de77575844c5f14c9964b6eb7b8f7

  • SHA1

    6835d4399bbb4db0eb6bac905f24d1dc7ea117d2

  • SHA256

    0a9971fe7d264df1235f75a910b1aca82e81f7e74f0909360a47fe1346949f26

  • SHA512

    9632629a74fc19658a1b29f27f1b4ac1f09e6b48a38f1f19a9df86496b3c0315b4cbe88ac5d0d195006ee3a91b902f4045174049c8c0b885812bc8afee990ab8

  • SSDEEP

    1536:kg0e5jc4GXFrCJoXbVettJqKX0RLs1PwAvlTGW/gKXxoH72EDW/4Vt1y04WQpOCZ:ye53W4kYEkF5GwgKXypMets0nCZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\422de77575844c5f14c9964b6eb7b8f7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c7ea8bc2a53e26fc33e799ad2afae1e8

    SHA1

    475f10dd139890a99a0a1e3d0495519edb7faeae

    SHA256

    4878192e11fd3d5196dc1447289c38bd57ad1003ca2174970ef2e77678553cb0

    SHA512

    f6029dfd4ed39302466cd9e8227351b53c807d1abfa82acb08e94fd3cdfb07c4797f9a9f27797d2aa395b972b7527fea0e42a1d8fd93c632005512a623bbbed4