Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 02:02

General

  • Target

    73719b1199bc63a4bdb6f71eb02e90c5.pdf

  • Size

    95KB

  • MD5

    73719b1199bc63a4bdb6f71eb02e90c5

  • SHA1

    5fe5508aca6588fe32b4561e04a0a32bad4bf36d

  • SHA256

    3849844d4cd68097196b462fb676d5fc38427e878feb86fa7c9754ad9509e895

  • SHA512

    a04be82203efcf0570893f419551ba991dfb47d14badea6f1122952802c5ac16e304a4bebdb25f7d5c0c0af17d88a6c483a11604046a3334a6f5753beb45b0b7

  • SSDEEP

    1536:QbyUjTGdOIUkVQnCQdkj6RaC2+fNDkpWFiYihGUYc0lONrQ/WxBRIQV/rWW8pO77:TSaOTCQdkSZf1kb9WlOhQ2r177

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\73719b1199bc63a4bdb6f71eb02e90c5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1676

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fd174d6a695196b47029eda653f27009

          SHA1

          e172457461db8e84206b451b9780b7df661337b1

          SHA256

          41838087ff7780b40f95fc14427c29a2f5a14355b50bab393014d835ece6acd4

          SHA512

          ecda8876ddb6f04e3683de1bbb52c13df6ff926b340b59d4c587fb8ad7a8feb8a2bda9b6b2bb7b53967fff3af2eee70fd7acc8080918a019a6d5471a096d40c9