Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 23:34

General

  • Target

    75cd30410982580d77bb1811b29ab323.pdf

  • Size

    86KB

  • MD5

    75cd30410982580d77bb1811b29ab323

  • SHA1

    cf02fb45291cdae3b150508bd46a06e4416ae608

  • SHA256

    2eb92cfa3830d66b39c539ed330905497d3bd884d83d76eb2a5f7a676b22f0f6

  • SHA512

    d4ded76d65dfa08f405fa507a9cd856f10555c94cc3614d64759a515a062bbd9c6f36fa343d0ad41a99e0b1549d8c2e69f31877632511a22ed353a0d5d23e571

  • SSDEEP

    1536:i1dsnYSGSHaxC6WD781noAHioQo4GLaQ7ILyH74MWuP5ksZ3WapOtQovTbxqeqR8:wsn2C6w4F6onx8o7pPeQYtQovvYeqS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\75cd30410982580d77bb1811b29ab323.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    48b214d1d182d76a1d931ce9489db4c2

    SHA1

    bbdc33cc0d5d7207550200a19c7356e5f46867a2

    SHA256

    5403067189def609c4adbc36a53ce83ef67905088324a2c164f1de1f6c4cf24f

    SHA512

    6ea92ec0021a39a8a9f9446e637ce48a72754670cbb92e3ec807b9a4b9e20da5e49f80d501d27aead4fb48ca7fffecdfa9993b2c8fec53a238ca430b57faa23f