Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-01-2024 12:19

General

  • Target

    679b72e36de81b5aaa805ebacd02d23f.pdf

  • Size

    145KB

  • MD5

    679b72e36de81b5aaa805ebacd02d23f

  • SHA1

    46fa45cac7ab8fd9ca2dfe03c55aca2725e9440f

  • SHA256

    1683940988114840691efb03a8069e60358d2c3d391dfd046155b82b89e9b89d

  • SHA512

    fa351ecec3ad27f1b1db831862de47d5fa5ebcd83803f2e2e4f0a569c3c018117ae2b60b8584ed281baf1892d061864bf52126f2ae49da69d914fc1c5d70b768

  • SSDEEP

    3072:OurONQSpWHUZkY3cZXVKz6c42faY+2GQi/5vhqOEGOZpzVUuVCgGkx:OuKRplUWH4q+bQit8OEGqzV1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\679b72e36de81b5aaa805ebacd02d23f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1fd560e96d1780acced9425882c33286

    SHA1

    3d1f77f1672763f776bea38b6f7eb0efca96e7f6

    SHA256

    aa43d809f9c060287e1b9b442fb7448824fee8f4a034e617fa926fcc18576833

    SHA512

    22bd4f19e0e9df0190fd79be454fb777ed3052be6e31432681e20c74606b24f022ac53b468a3c24893f26374068579ca6a10c8952ab0124888546d00d5775c6b