Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 08:57

General

  • Target

    71ceb95c7c1a95220add89d517ebc40b.pdf

  • Size

    79KB

  • MD5

    71ceb95c7c1a95220add89d517ebc40b

  • SHA1

    d173fb7bb092bd91ad50e699c858713de5b3a4c6

  • SHA256

    50fa65326608b0aeedf02e18e5eadb6d823ba0536092774f75a0bd55d345fa54

  • SHA512

    44cc659046f2f681d7f99518ebc9720e4857672d4571aebc87c5b3c31667a1c77dbaf5ab54ede4cd9be2df2cdcbc5a3b6883ab962314c23d0bb146caf7a654bd

  • SSDEEP

    1536:2/90G7p5Mu2ubhzLAQbaQl9ob7iNxlIRy8Lrjc52uEcxUCQNaeJw1dzqx8h:m+6jAu9AQmTbeTlIRy88vEcyCQwzdeM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\71ceb95c7c1a95220add89d517ebc40b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2540

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2350eb266500bf15b36e2f3d7ccfc9f5

          SHA1

          1b68233412e842fbb429be4e56b372d359bf325b

          SHA256

          c4f615bf78c648bb24cacf07d0604fffaf9c14096d7d72d59d076df0fbd5f67d

          SHA512

          54039ee868d4bacd0b3d72439072081de0d5ea34f0c17c66b0f02850308e374bd1573964d66f20e01bf97417f91873b79792caf85766037e0e7ac44f5e1cd8bf