Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24-01-2024 22:27

General

  • Target

    73034893e13a3779dd0313a966cf9823.pdf

  • Size

    92KB

  • MD5

    73034893e13a3779dd0313a966cf9823

  • SHA1

    b9805de27e264b78e530bbf94872d982069188d3

  • SHA256

    3904855050b89cf940aedff6d5c192e0ee2a97b750ecbb3b5d4eadb9256e1773

  • SHA512

    46527126a47307ae8f7ee0dc7abdd3290dc6d7a6a2ec2d8a16b9540314cf4e2d70bc74f055f5a1b6f8280e359ebfd032d76797986f84ab784c5b209a59d0b6cc

  • SSDEEP

    1536:pbtgWl8xkz+x7qCJrFAaMwXns5hZMO1DRAJMnU3msbuEBW16s5ztWUpO7gn9:1tV2e375hZMO1DRvUNSH5zQ7A

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\73034893e13a3779dd0313a966cf9823.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    aa024956482eab6013d3c74ce34ce4c6

    SHA1

    31bde6205b04c18b4821c7fe54027e4c63f48a32

    SHA256

    426183e625ca2f18f1ded545b05f5a2ebe79d6bc4db532afa695f46d02ed6fc4

    SHA512

    b9e64736340dc71c954164a6f8a1afc46b4d512f7b4fd9226dc2a1bd41ce64cb15143aa3fb7cbceb78ae40ad17b2f1f0f1512b72877f8e802d567c9d12515c7d