Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    23-01-2024 18:22

General

  • Target

    703f1c869ed5ac15c4ac869610f44564.pdf

  • Size

    73KB

  • MD5

    703f1c869ed5ac15c4ac869610f44564

  • SHA1

    6235d9380aef54a4dd13f0a6d1f1e0c459a3c031

  • SHA256

    da6afcfc9c426537b3d7080eb89747f629749b8c9de837e5f4e001792caf869c

  • SHA512

    1cfa0912d2155ca79aa89502f5c9455f0021bd3e192b6562a4fb30867e9b85c92be9d4958d27027f275e5088a772a56fdbe539bff4e0a4df4a762b78a7926e22

  • SSDEEP

    1536:fAriB9GNZxHPjPEj4DXWK/8XbnlS76yWASp4fftWOpOwrSgIm/nLTlVJ3:IuBs7/L8XbnlZp+Kwr9IsLZVl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\703f1c869ed5ac15c4ac869610f44564.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2db197d34912e22d966966d0af9cd7d3

    SHA1

    b9b8c9d31c00f45a9ccb0f702cabd7db4d1ffa67

    SHA256

    983a9ac516dd32f019d2018df952287408ef7ea326f6be58cf02d820a2c4a542

    SHA512

    1d7dc18a645beb173ee74dbbef84ed4a3faa775823c68660a4db1a7538f98197d5579c5675c0b8856f00f0d7350c31b5f57bc88afa17b6fb0d98241c3ac10759