Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 07:46

General

  • Target

    7420157bcccdef47297d8c778ca1a2ed.pdf

  • Size

    85KB

  • MD5

    7420157bcccdef47297d8c778ca1a2ed

  • SHA1

    0d818cfd24eac46e86d826edfb655b58bfbd6c21

  • SHA256

    c2080a969085fb9fedfaf744afffdd372f0e55b9cd9ff50156c2e3a8a5459aa1

  • SHA512

    9603f60c0f7577927cd6efa5f23f723b0f698d0e48c1cef25055ef8de502da38e494a2ab0c70ade933bd5c01d9ea07b26c1e2047381336b919b283ce63e80f5c

  • SSDEEP

    1536:XqN76+5or2FxbEyg175FAd5xWJrlSmnegABgzYbWIAcYiD/WapOtQoqj7uhezx:aN2+5o6vbLe5aYJrzi2UbhDQtQdj7uhg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7420157bcccdef47297d8c778ca1a2ed.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    95a9350f45e2fe6bfd95c868181718ce

    SHA1

    58d95557457478f805c2095529d00e0897731e76

    SHA256

    557df698eebea0afb42c2ce939035b196a783832e26d59395bec5e650c7cb3c3

    SHA512

    79fcef8f335ee7b1a02316650b8ecbe97548c5deb9280ff6014a7e88ef75c4f5db5fcf3679f1adda40be4f374be83021c29c73bccd3253ebfffd2927a4420aeb