Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 10:28

General

  • Target

    7474cd86faf18e72a0d87f0cd6f3fbed.pdf

  • Size

    85KB

  • MD5

    7474cd86faf18e72a0d87f0cd6f3fbed

  • SHA1

    1b6ab4621865e8ba3fdcd479152a0d2f35e89c6c

  • SHA256

    a1bd798afcf853e968b4bbfa2583700244bd0e731c6fdcd7066388c1b5f2822e

  • SHA512

    490a284866408f1dd88e57398cad1a730a28bf48e5a3838609ffef83caa8dfda76d3a847027c6d47a17aa4edf44cdc929d85344c6efca557410529de07f4481c

  • SSDEEP

    1536:nQiuP8iIHCrtLhAvUUITyPt3M73V7BSx5b+ZLl1BIaADFZ3flGWNNadWjfbcsWUj:QiuPlIHC42uChB1ZLl1eaA/flKW7bcPK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7474cd86faf18e72a0d87f0cd6f3fbed.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7fc186c84a03500c73517add28900161

    SHA1

    ba1063b95d84e1ec1a09595b67f17ef7b0988e31

    SHA256

    1513d1a1ebe5cb499b7fe84b608766aeb63af17cf66407a153688ee4f1303d18

    SHA512

    46583b236cda0f28991209ec7ec22b912cc5c68f5e1b4cee71b063ec9549770b9d83b40a6262ce8d9cea2c0c3a32c5484bfcd40ddd6a06a67838e38222c1de6c