Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 04:17

General

  • Target

    73b6fd96c8b216cf4be4e766600e0ebd.pdf

  • Size

    113KB

  • MD5

    73b6fd96c8b216cf4be4e766600e0ebd

  • SHA1

    2a00b3cf6a06674d912fbc94982517e801d3cbfb

  • SHA256

    7818eecc910c1aca851a5e262c167d4bc559347a5221c3561abc872e342fc138

  • SHA512

    457720d6ad8f6d1ed30ff7ddfaea52e7ee49939b3803740ac53ff31a8163c32f1a84fa0e8e4ec69bc7eb56517bed7427a14b19a6c3b355fa321a1b0e1ee7411e

  • SSDEEP

    3072:qnc28joMaJxEOHEBQdznq9uz12RgS54wQrncVFYS7S:qc7aJxBksnq9uzAWS546V4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\73b6fd96c8b216cf4be4e766600e0ebd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3cb20c7ce359f137fffb77255bd00c35

          SHA1

          a8261b134d04701967332e5bba217db58a6ec571

          SHA256

          1def6f3b0fc057a5ca83b025515538d0b45aefb2146255eff0523a58c31ead28

          SHA512

          190aeba35e6f03de3bc87c5e979032a9ed0b27ef32b380cf1c4bb0840cc454e91a76883d83dc327bd25c89a17cf7538e6ccabfbf74bda13fc0b46cae23223f7b