Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 23:39

General

  • Target

    7329f0925f3ebb6587b761cd4cb2edfe.pdf

  • Size

    87KB

  • MD5

    7329f0925f3ebb6587b761cd4cb2edfe

  • SHA1

    99ce96e53753c62a4421b0685319bcbe9ed055fb

  • SHA256

    10725f7d9c2321cf2a74d821f9ba9a4a643e2888b2a684befff53916ae4a65c0

  • SHA512

    6f7744af357e4dce68337bae01f15ff1b237cd2b876f1b10bb63976e9c19e0fee52a83979f08c2ebf592b11a7bc99a56cb8baec54ae8a4448415d2e9a689533b

  • SSDEEP

    1536:rI706wrCk4I/yxH145vmafd89qev+xh+rLGdbi0bRfzb2ejmxhvtQg7WHpOvTWBE:49kd/EH14ZCvW+rLkbiAfzqejmXVQgJ5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7329f0925f3ebb6587b761cd4cb2edfe.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bb6e34afedf9ff8ff3f12837d43538ce

          SHA1

          b2cd94ed259b756ffb7dae461db6eb1e31ebdb4e

          SHA256

          206ee1bb87d02405e0daeca79100060bf0b031b5ec08372429fc018839438a84

          SHA512

          5fcf5aa2d3024713136d623c921e4d422cebc616c54da891aa9567722a49633ccb4d2daeeecafdf69d3bab5e52e7679a601f62ce88785f9bf7ae76ee15dc29bd