Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 12:48

General

  • Target

    74bc5947e5d113fb0a7c9bc7c71cefbd.pdf

  • Size

    147KB

  • MD5

    74bc5947e5d113fb0a7c9bc7c71cefbd

  • SHA1

    81a7c709ed3ed99cb2a618f1fa256d9cb28f541d

  • SHA256

    b43493f33354ca12f2ae90f677bb418252dd3c5e2a0ebd1b7242d260a1944a93

  • SHA512

    c354683639aaf55a51f96b6e2a6ed0b5606021ee5ef11bbda1c609276b52f0430abbdf2d6328dc00c1a5000552401ffbd16a4e3371f6a13e17bd64446d73b184

  • SSDEEP

    3072:mrj+vj+NeHfLL8/98dhyHt/lBmPlDTAwa9YE7injiseR2wuYiH:mrCvj+zF8d8tAdG7ineBR1sH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74bc5947e5d113fb0a7c9bc7c71cefbd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    646f7ab1152ee2c0bd0d728d63fab2ff

    SHA1

    77d49a8cca424c3aeaa112abb25661d25c7cf832

    SHA256

    dc17b3c2bcf261d3b10534985132fcfe4c204112bd4a3184a9eb259eb0bad393

    SHA512

    a41938d149924edbefef0feaa25b52862eca8b2d4abf14d79d1fadc81585d5163ad3910e85978bbe00e27e54456adf84722b284f34400c61ca3a33f9778e8d76