Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 11:24

General

  • Target

    7492d6047f7ea75f60342863817c73ae.pdf

  • Size

    85KB

  • MD5

    7492d6047f7ea75f60342863817c73ae

  • SHA1

    39fc2aa1662d94c1861c1561b427434df22c56eb

  • SHA256

    4a485510245d890dbb9d63dbfb05bafc22e0ca1948d85876888e268aa07c99ba

  • SHA512

    afb0450678eddee42085df9bb38928c47c3076b28b11642c890f0f8ba1df5e81efaf66ca12aaf6fbea8d69f59cd164f6ef35595071f3a8de95740bd5e08110ef

  • SSDEEP

    1536:PY1anHRQ4KxTyINaK4KI5kTdbWirx8dSk2I2KSy0WXRWjjjDEWQ/J57AHSWUpO7H:ccHRfsyI74KekTdbWirx8dSk2IrR0W4b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7492d6047f7ea75f60342863817c73ae.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2d53ce1d740d4f32fbbaded31e14c0d7

    SHA1

    536e82e671f44187ac4dbcba46134021fa6598ec

    SHA256

    6008bd59a95b975cbe2c63dddba7839ff81a078e1e862f5c2261244d66d2ea14

    SHA512

    400e566f87b78d88046b19514929425ab11c96fe5d328454abbf3d5d7cf0852550d2ce65c2401b0f5bef6ac6af9489a5006958bb3696d62cc495fe97f3f35c10