Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 12:07

General

  • Target

    7232bb3749371fbf4ae86ddcf2128d82.pdf

  • Size

    82KB

  • MD5

    7232bb3749371fbf4ae86ddcf2128d82

  • SHA1

    99aa773b80359fe9bb2c121f17d92da91791c837

  • SHA256

    9ac0a50c02feacc8f4c4e3c6b2bac5ac47b83ac64a36cac64d4aca8a417b8367

  • SHA512

    c3ce51c4db69fae5e9a6dbdbcc9d0531b3d3a3ed19537ec52739d43840302dc2be654138ace883b3c0cb62d0516055fc1898ddf0ef9c99d24c7c9ff7d7d99f55

  • SSDEEP

    1536:YOxaG8Mywpi5s+Da5IKj8OxVVXJgvqcqB/ZZrCOyM9vS4WMy66YoZLWUpO7yDCd:zllZpidDa5rxd87UBZrnSsy69oZe7x

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7232bb3749371fbf4ae86ddcf2128d82.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2936

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          106d2256495b2f5ff77be3009d7d40a1

          SHA1

          6c0516b3e4886fd695355a3618b004972ef493a0

          SHA256

          698795a6e3dc1ffdaf36be7dc236c8723ee3e344867d809fbffa9901bcd05dff

          SHA512

          035ed80d8185c5fc4a1f8a1fbded048ac05aa31b3edfd8397affc8992583643c7142b03fb793b484babd6fc4240f9adbfaac22931f8faafcc8532df5dc15b16c