Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 01:50

General

  • Target

    736c018dfcd2cbaad6d9056b08b0995a.pdf

  • Size

    87KB

  • MD5

    736c018dfcd2cbaad6d9056b08b0995a

  • SHA1

    f51c04def8ab61032abc2fef09d01560f3ad8e1d

  • SHA256

    dea72d4eebab22b31a12f4225c3c8c00b598917c52b6b85b162f821c80a42db4

  • SHA512

    974697403cfa6a83e1b62d79542922b921a469a27aeb75bc8ce807495338010bef2651177566b9750e2c4effa97e41e234271497e9eef4a6e2119008a9a0eef9

  • SSDEEP

    1536:Ymu2ay9i+soiXJg1w3Y07jaSjKfXx+aifk/k/SZWGpOKCWHfxxUIRTUqph4r:fu2R8SiXd3jyIKfhbi8c/SOKaIlU8G

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\736c018dfcd2cbaad6d9056b08b0995a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6c891654670ee8786b135cf45a8c1020

    SHA1

    b1721213ff1c9e917729dcf11198db20129241ca

    SHA256

    76a6fcd2df6d06c34bc6ceec9d56818ceaab3a5d96d87791be9e6da36fcc5733

    SHA512

    69564fa6e69b7d42e1ec0c3d8cbd7f9a872d203197d351473e940b89f018c2be4513e54512b3f599795959db831f459ff2a23af3cd1ca3719055677dde1a4255