Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 13:17

General

  • Target

    74cb1a2b12737f7aad73861dd8aa237c.pdf

  • Size

    86KB

  • MD5

    74cb1a2b12737f7aad73861dd8aa237c

  • SHA1

    2239eab8c57fb7f790f1aa0bd74fb94f28a882c2

  • SHA256

    93ea230cafcd8c4e0f772293b02b4687f875b8791cfe8efd676bf63561d2858b

  • SHA512

    0f881bd2e7f6f3cc5aa697221f9db92eb1155975bc4de8d61a7ee8e8c339c86321c2197e7881a4864d6d588976585862c1e715b64fc075cac2c994219a19fc0b

  • SSDEEP

    1536:Duweqk/MIQwNBLbykZHrJo785tQiznOzfTRk2Slu+/kIWwpOS9WZv3WiDXaUV/m7:S8Qf50CHrvvXnOzfu28u+/kXSUW+m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74cb1a2b12737f7aad73861dd8aa237c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          035bb864179526b4e4b34083d29e1d4c

          SHA1

          d4293b4becf79233d27dec105193880c994680b3

          SHA256

          60845107664bf33c32124e60d80f99b8979b76dd0792ac0da7a6048fc3803fcf

          SHA512

          e0b3c87577990359066b332199d58f4ffae8c8b55cde60dcee7f191b82ccdfd2b6c28d25aa353aac318f80ee53755977383410edbfcbffe7b01628f704b9a94e