Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 07:25

General

  • Target

    64d02df78b0c36857fad5d087f978888.pdf

  • Size

    90KB

  • MD5

    64d02df78b0c36857fad5d087f978888

  • SHA1

    cd20f0490acc2c7568e9fc1d7d99c0d1c3cd4e70

  • SHA256

    f524f64962329f3625350fb24292effe858300b03754d6ff2b9fdec75d1ae91c

  • SHA512

    e1fcd095b9e008bf353777e23586b0f11862a951bcf2ca3547b4a12dd1de46b1cb20854bb73228b74c650371050eaa52ec600e38beb62b9355ac875a02604e3f

  • SSDEEP

    1536:WFdZ+Zs6WNemYzu8RJsl2OXN+svRunOp9v113YqSWtVBnD5M5zStrcgmqkWwpOSG:KPySsJslHLv08hD37NM5zStQeDSG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\64d02df78b0c36857fad5d087f978888.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2076

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b204f921cf18aae79ba76ce238a2336d

          SHA1

          42022eb95d64fd78c652630d9c4f786534d2aabf

          SHA256

          f4490f784c29583f84ee35a25544e695cb6e308ca77002262da947ff968d8dcf

          SHA512

          214938a9fb450067508d451fe6c77a96c70f52b48dc16fb192968c4d807f235a3c298aa52cd703cda89aface9181524d39e74a62dd1ee0df3c092029026cd88e