Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 20:18

General

  • Target

    7077bd3a98151abddce04074c52644f9.pdf

  • Size

    80KB

  • MD5

    7077bd3a98151abddce04074c52644f9

  • SHA1

    ee7c535ce9e11695881b8c91fcfaf9954d51c338

  • SHA256

    65b3ff7a2cef2edd6293bb722d101672aa19f4383d988d4f8dcc32f9c845c0ef

  • SHA512

    6eeafde45e77d0b5e3ebf6c034a4dd468ae71c2a121f12c2957369fe33d11db41efc0fbf70fed4320525f13b67bf7b0413406bcf6221ee77f79605ceff0815b3

  • SSDEEP

    1536:EY8lwtvZgFfGH1dl1VeTZQE+4AJBygtpHncWQ7HOe/qD/7BW6pOu26W1Pfa5BBUF:ReK//eFQEAT/t9cWQzOeE/7iu2Xy5BBA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7077bd3a98151abddce04074c52644f9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    86d5d1ec63bb56214236845ee28dfeda

    SHA1

    fbc37dd5ec9cc38bd1758840185de5d7c752536b

    SHA256

    f4f55add60c8d03a75d642f0a3d0b18f49b94bf0c2268fe19440de7946f0d054

    SHA512

    5a137762eda0b48b98dba2cc44a6bb1f188f53fd53acc12ad465929c25258d966f32c89aa1a00d741eebd9bd93339f01b7b8e045519196a2ac51bb0dae253b8e