Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 00:53

General

  • Target

    6679bc9353b3077d918658a0c7317983.pdf

  • Size

    76KB

  • MD5

    6679bc9353b3077d918658a0c7317983

  • SHA1

    91d9f86d673b41e3de4fbb6c6ca68ed405ffaacd

  • SHA256

    7f7f81e6b2f2e19a3fb9d076f23cec0c480241a5bba4b64ab512dac20d8ae291

  • SHA512

    7bb7f9c4a4da2622417ae0d1e429f5fdeb710ff8c8248909a07b05777f654ecf911fe10a91f59ee54ee6e3b4c4e92a5a77c063da4cfd9a58bca7d20985b243ba

  • SSDEEP

    1536:Iu3MZLwQXqKL9PLLwRqTNalImMmOLkX6RT3TWm131kGvIMyflNeWGpOywWOVEbcA:QZzrhieNEBfglfl+f7fy2lTun

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6679bc9353b3077d918658a0c7317983.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:804

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          349b332c439f497003dad044d63e2adb

          SHA1

          669af1079461d284924a28a094e78e7b53dba7c1

          SHA256

          c620bb933d18c15450feac1b5e332982b5ac5b4bfbc9b1e0bede45b41f788b26

          SHA512

          8c5a595ffcc76370cf14a1ff4f6a974c45306d173ff9b64932cd8c9d6a381aa3f56fd432b9b27012c52b0754d2d220fdb2bde5015f2c244d0bbdae3454549cb2