Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 01:35

General

  • Target

    71184e1cdd21dcccb11b9ffcc7e9c8c9.pdf

  • Size

    86KB

  • MD5

    71184e1cdd21dcccb11b9ffcc7e9c8c9

  • SHA1

    949930213d290a4231efcffb99516a993fffe9ef

  • SHA256

    0c7f5aa1b8553c0cf375db5f720459e9c26f46630871f89862129a611921b4ab

  • SHA512

    3d3de22c89198b28889aab243c0aa2cbc724c53615cecbfdf415a873471116e3c73c93d9b979397bac38b14fa01d28904fcfa519b619db7a67815e70764791ce

  • SSDEEP

    1536:91uQ3cSuJjF81G4YajG9vdM8iwSpxgNBWR9V4bVaP5j2ZWbpON5yyyQ:aD5Jx8VjEvdM8iwQgqkpaZ2bNIo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\71184e1cdd21dcccb11b9ffcc7e9c8c9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2440

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ba491225ae6a4bbff69d1bb9d8258cf1

          SHA1

          9d3c45cd7bac35fe18ac57917e61dd45cf844405

          SHA256

          fe1d679a01cb28f4330a57bbd4a8d1db6255b7b854370ac8746f9c9c2bb8774d

          SHA512

          adf36d945f0721e7f6734c29da5c503c9da3022d32ae3d38263d2ddc621d34dd7ece831c50cebc845438073862ad828e419b4f386151b426244319a68562950e