Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24-01-2024 13:11

General

  • Target

    7254850522187c53c0761dede5e390f7.pdf

  • Size

    86KB

  • MD5

    7254850522187c53c0761dede5e390f7

  • SHA1

    b6880a478b4100f8d3e3a6d79ddf145ff188e16c

  • SHA256

    74bb7117db0eddfead530962bff61a64ffa80b91474f3a540bf8ad64c8d8f952

  • SHA512

    182b343083eff41891754188dca548facfad1e1c24da10b77db00917c6dce06738f837d9990d5bbcd5d5083ee378bbc2c8cb7d019ebe0043ec8e4b7e92971f5e

  • SSDEEP

    1536:uX+zulDz6lhSFUyLHlf1POUJDdpVv9EaD8ywoNpy52Y9QNpwWb7WcTZWbpONYV1Y:2vl6lQD1POUJv8yvNpy52YeD7nTbN3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7254850522187c53c0761dede5e390f7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9c1d7d1ea2d7dbb27da6114dc98823d9

    SHA1

    2375a903bceb6b9684071b0f92d1c008924faf5c

    SHA256

    56df017c1e2f656f0245f5bc3c3b8e643caf73654a61d8c17742dcd167da9ead

    SHA512

    0801c6880154a3e7ab26d7a8b9f0865138bb0d34d5e34d4cc0465a60f0df91c4560af0afabb20f2c386f906346836e5565a4e091fb6995944ef24e7608b72f6a