Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 11:39

General

  • Target

    7224d5c29ae18393865ba0f833ac3bb4.pdf

  • Size

    70KB

  • MD5

    7224d5c29ae18393865ba0f833ac3bb4

  • SHA1

    dd9d81a17bc41d33f91ea70776077495f12318f5

  • SHA256

    7837d5c49c74b4229797e7277c7167fee2cbacd4847a6009569b62bb62a37c01

  • SHA512

    d9382faca256b087ce16ab1bc1ce25c8107f06a3c3f938bb1de32c56156e42592051fbe3c6ca18dce420973584e088d7b50b30166e200bb008c38139d077ccc1

  • SSDEEP

    1536:rna/Fbsgj+k8e0NdXW54z7ceSPi/YwWclGCKuZdcCz49pw1iS8Dpm:WdYgjKe0NdX61ewB0lGCKTCz48iSF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7224d5c29ae18393865ba0f833ac3bb4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cfdf0ef811d80dbc5158e97d1218aaa7

          SHA1

          df5944f7ff7a4925892d7e6a2bb498122331c023

          SHA256

          5a52733f2e6e68a82544900bf8968e58e92f499fdf6332db14f598e4dccdbd57

          SHA512

          45dfe27c8c48981cfe7947d2371fa13d713091c3107744a5e99f503c8c6c766573be18fcec4477c544ec4b76d75e1a3a222c453a1b54604dd4c3f40e8c04b377