Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 09:10

General

  • Target

    673ccf8f4d59a75234537d78b7c36975.pdf

  • Size

    78KB

  • MD5

    673ccf8f4d59a75234537d78b7c36975

  • SHA1

    418d510120223adf43ed7fbda646c337d668725c

  • SHA256

    12a5aa86bf07d7edb0cba51c27b24337dbaa9b8871449639e584c96b10c6ed45

  • SHA512

    a2978e2216aa0883db85ebeccd02aeec613d8dfe9c1a977f69aad25c17802da7e41db0ba870ce508c04982839f8b308ccdfcc2ba0dfc330ba87ae0719c5a66cd

  • SSDEEP

    1536:msnZuopM0Qcmjw93na84yhHP8/UxxFAwPWaAPRWaypexMmP89pQpBQU20au7bk:FZuKM0R3a8ZhH0WxFAw+a4oeumP8Mr92

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\673ccf8f4d59a75234537d78b7c36975.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          486cf6bf1addbe3d098bd2b7ac0a9b89

          SHA1

          604f38e15873cf875a9323381d9ff3df4994fa78

          SHA256

          3cdf4ccdd49e07f072e65125c49373d52818a00ac7fa9fa6d6aae58daed984a1

          SHA512

          16607f2999dc964e72fbc19e7d7a9edd4d41365e400c2fdedf3a1ce97989bbbe0ff0ef79f8ac5c4baabf0af34574e485010a93df48d6a814f6325beb3be3cfed