Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/01/2024, 17:44

General

  • Target

    6fea9dfc689688f8ac6c2748998cf80c.pdf

  • Size

    27KB

  • MD5

    6fea9dfc689688f8ac6c2748998cf80c

  • SHA1

    779e87d2f481bd540e926fa67238d073ec11ccfe

  • SHA256

    a3b943e38cb9c224d8db4bba24f2e789c5efe9c1c5aac4635e559bce1785a0cb

  • SHA512

    13fb5bea6417eb801c608bfd959a9dd4bb309fc8063d5929be8f1bc24611a00f8c69a7f4eb58debca055d078d2619cef166723086b99402ec2ee40a429270aa9

  • SSDEEP

    384:LErVyi4I+o6nx106YCkhqLMj7TbPH5NNo9+xXg/IeM32oCUSVFSBBHK3pRGGvgic:LEhW7khAes+xXm1aESzgGGvfwxB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6fea9dfc689688f8ac6c2748998cf80c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:628

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fca085eb9eb87c0149efb2d5a07d9928

          SHA1

          594a7678a40b5a46fc4b3ab6900b7aa75dea8bf6

          SHA256

          0b552eee19191955a751868b58820fb4d5d940aadb88303e0d2e28b8e2c9db17

          SHA512

          99a7bb7cded78d216487d72becc73301bb0b26c71ca3b37feadc13974ea46e15b07ad893e8bf037336af335ab5cfcde022c2a2360afeb517fee176bc10a5feff