Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 02:16

General

  • Target

    73797f71c3452fb6392d06ab735ca6b0.pdf

  • Size

    86KB

  • MD5

    73797f71c3452fb6392d06ab735ca6b0

  • SHA1

    53b18268f6addf4338ac50a34541b0f62463ff01

  • SHA256

    204661c3d37a767300377d41b7e1e56df481dbd7b3f4feecb7831eea6c51fe97

  • SHA512

    33f6cbfa8559c4cf96930312f1b0be196588a231f5188c3d28c0aa10ede9343a4cf63914b8447a04a0f8ce87863ad05d3990328a1f89e4d4a3b7a1856e05119d

  • SSDEEP

    1536:C3exx8UaGmF4q5MWTrikOpMTQCc3/fvVoJEAWwFhnIIvSswuWuWUpO7Gd3:lxxa43WukCMTQCK/fvVEEYnIIaKWZ7Q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\73797f71c3452fb6392d06ab735ca6b0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    96299e68f0c9f1b5364a7ed5b3ed288c

    SHA1

    790b6a85ce284f1306d268763584ee243ffc947f

    SHA256

    d1f69a7a6d0fcc1fd68575de24fbc80278b63dda775819e55bf025bcd3671e13

    SHA512

    96e5117b4f13f18668baee2f8411c64a413576af3664e21ea1e0f1613f5566c63cfabcb9e5ff26377dfcc2b9f1d7973f20ff0a4dbfcbef2e6f4a4992ed3cb27d