Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 11:38

General

  • Target

    749b56caabec5761f9bd9b41bba86e18.pdf

  • Size

    34KB

  • MD5

    749b56caabec5761f9bd9b41bba86e18

  • SHA1

    6b736ffd10169d377aa2560edf484a6c322914b3

  • SHA256

    bcbbd07ae1f87d5a912c486a41cb61a2708f4ea4e5b310f2f11ee574f079425e

  • SHA512

    f9a9998889f7693ca3398ee4265774a6f3d5814093010022a8f3f3b67cd01d9590789f4a191beb9052db823f983c1e3d16835f8f8503df44a85cfe7611a3f1ea

  • SSDEEP

    768:kSmJzymkz0vkVGA374GTtyT4vJA76hOWdj18T:iymkzzz5yTg1dB8T

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\749b56caabec5761f9bd9b41bba86e18.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2180

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4a4833c989c087a176b905eadba4f047

          SHA1

          14e2f76ce7c2f55da15718ec8ad6278d50bf949a

          SHA256

          0c052aa9d4f461c0c55f9dafc45835a45fd455283fa332462d8a30bef531889e

          SHA512

          fc61b6fefb7093b5446be58120623d81e022ae3cab445a8387abd32fec0feea173c68e6683c547626f693625fd74b2676e34bbda0d889a9636af59477d32616e