Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 00:56

General

  • Target

    734f596733cb5a39d8c005d4b9b7c58b.pdf

  • Size

    85KB

  • MD5

    734f596733cb5a39d8c005d4b9b7c58b

  • SHA1

    11b4e603e834c9b31576b54ca77b51aa123fdc0d

  • SHA256

    ebe741a5a1fdacd9a98af13fb2c76f161c4d95b300d04e0ef41d5cd86f83d925

  • SHA512

    f19443464cbcc03a99b7aee6a4ba4e096ddd781d313c385398ac3fce37975f3164bc6eac0f1a273fd146287dea9f6be295d12deb61147dbca2d1ee3924e2f9c2

  • SSDEEP

    1536:EH9rsDgKo0kijR6c1sldR0kNzy04ZTjghgm9D1Yhu8jhSaSe6oUDdj/FOHu9ixiR:AOUP0Tjm3heTcJV1YhPjhSJMiN9ikROA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\734f596733cb5a39d8c005d4b9b7c58b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3064

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          33e4f63179c57ba180bcd23b4822d0a3

          SHA1

          535d0c58c165ed0d5c5607cebd4f78fb2eb84bbd

          SHA256

          2e77988d4139df21fae845fea4533e68914d16f8a287bcb2decdc0a23a7cd179

          SHA512

          5f9765b8afe56d55a7eb68e8eaaeda7da2f8991bb023272c0bc084cd5cb191234e250080157183e18e88d259640f061a4ac294f730f9a66939273027efe3dc16