Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24-01-2024 00:54

General

  • Target

    710315731ad7e4f2c82d46ec493a89a0.pdf

  • Size

    46KB

  • MD5

    710315731ad7e4f2c82d46ec493a89a0

  • SHA1

    532cbe32381a8075e7fc4af1ffe3f00a79881c37

  • SHA256

    3f08b1f5e31ce9feb04844e22b96b05d8cc52d45a7998806188f79e486ffd026

  • SHA512

    6305034080ad8be31ae6a00fd4ee2447e8d7e002747ed8b0955618154653c8b6d5400408eb637409dbb93fc2c3772afa7e774cb46c634425a23757577c1b315a

  • SSDEEP

    768:+cbnkE1gZqn+DXTyQy+Nvv7rOTkM9KteUSW2pf8XElOb1DLzhiKY6xpRK:+glnqDyq5vuTk7Er8XElOb1DLzrY6tK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\710315731ad7e4f2c82d46ec493a89a0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a4036ee2febe117e470fd4ace5fd14ea

    SHA1

    5f602902c86296daf9b013e68aa1caaf84f93b38

    SHA256

    0d75922fd702d23c28b64f46f6c93135e35a4f14ef30734e73de286744aa0e34

    SHA512

    9bdc855db1b2967597d2e9cabd41bce29983932d0b61b084cddb9eb9bf89ef7db63c1924815979e15bd0b2e9a6269ec1dac64a8dc4e0d4f59acceb5ae91673d7