Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 07:52

General

  • Target

    74237ef464f5f9df1b9c0292b2e10da7.pdf

  • Size

    90KB

  • MD5

    74237ef464f5f9df1b9c0292b2e10da7

  • SHA1

    a0902e39b29d24b8d9f864083b992786aef7b5ad

  • SHA256

    3be210771bd609eea610a659f668f77fc481b02d7616ae0f53f56479c6ed0cc9

  • SHA512

    a4aaada75c764edcc8bee1d7f4e99b1dce7941c3cb897be90d6e63d72d88b92fd919f9829db338d4cf725f1903c0ba1c1eb515951000baae8db2ffd968742743

  • SSDEEP

    1536:iR5Ikrzs8amzbfQEnmEwTTL7MRrwtwWvA4nM6ueoxYwBe3d6u4Tz2a/WOpOwrKWU:0IkrgUzb9jwTTL7ovWocUxtBRu4TSa8b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74237ef464f5f9df1b9c0292b2e10da7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1936

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          12063ad9d22687cce748a6d4afeb00e0

          SHA1

          b2d6a0690b01dca725427b6cfc194a9973fe67a4

          SHA256

          40ec7d0a118d7896e61bdbdfeb9321f9fa735edd5305f0375c1f34a99d952528

          SHA512

          ba11c97cd155879d4820629b367b0606be393365af748171c8b9a5a5eb84d0baaef6f8692fb420cef3531297b8bc812d46a764857af4a80fbcf3bf9a926455ed