Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 13:07

General

  • Target

    74c6cded77f4b7328ce3b00fa112cb2f.pdf

  • Size

    80KB

  • MD5

    74c6cded77f4b7328ce3b00fa112cb2f

  • SHA1

    4b5281b4ee56d220f62d589593d599b9eda773a6

  • SHA256

    d84b02f0672f3d12801ac40dd2bc9231adb0945472f7faaf542c721495788e6c

  • SHA512

    79bc1d2342d5430538a62d6146cfac1ffcce43d119dd92b7de6d8aacf82f77b3360fb59cd846e63fcfed70e390d1a994e064aae676bcdaaad12af57f91ecd491

  • SSDEEP

    1536:qheZXQceYTgLYd0mA/7xll6igHOucxu++vE9er3QrvnXaR4WqCTmu3GXmreb+WUw:acQsu5Xw8Jk+DcCaRKCdGWKbp7v

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74c6cded77f4b7328ce3b00fa112cb2f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1948

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d9d27e30ec871495329fb7bf005dea27

          SHA1

          c63b46de0966417e477a80876ced3f0e98c13f64

          SHA256

          83da91414c370540188d484353b8a367bf5aee67a95dd1c001ec04e8ce6935ee

          SHA512

          9b90d07a53f2ba8234e714eb0aa6577deff9ff6cd89a06fc9e0523697236c9ce3849c0fd175c55b65b89864344d8a70cb46bae571a64d347b6f402a44624e039