Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 12:31

General

  • Target

    723f3c0ebf099b77f3e5ce7c6df657e9.pdf

  • Size

    88KB

  • MD5

    723f3c0ebf099b77f3e5ce7c6df657e9

  • SHA1

    f8e475bc6261946d8efe010425992d44f818d0e5

  • SHA256

    d4983dceaa2874568d1f0b572cd8b92a152a57fa850f384ca7aa026471b9f7e0

  • SHA512

    a7d849cbe7ef654b236c0bda2fa25899bf29f285ab7dc56a003ca00f5f725bdd438e39cee0e307e041a2f8e738ccd4a4fda78346e96646aae475b80ca4ebf936

  • SSDEEP

    1536:+yQe+O/csYIjV5V7WeooAZe5T8evjRFK98fWHpOvTWW4cjcW7IWrdK7NqIkR:ge+O/3Dh7WZlZepzvFFa2vZZ7IVQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\723f3c0ebf099b77f3e5ce7c6df657e9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    171a75b4cea35e4129077ad015448cfc

    SHA1

    066f468e03ec55e0a8d2a676e21a3a7131bdd273

    SHA256

    5305f99189bdd2bc054c18db809a6289fa3ea6204526df8388c8faa9491a3334

    SHA512

    df5f0a8a5e33ec80ed9a494eb42cd3dd5d6619208cde5d23c13c2b8820110c142bee6ad09d26ff48d122349643472e275cf5d8a0f27545f8ddb295f32c0de2e9