Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 16:46

General

  • Target

    7500fa0143b8c664219f3aafc5aa68e0.pdf

  • Size

    80KB

  • MD5

    7500fa0143b8c664219f3aafc5aa68e0

  • SHA1

    6c3f19f46a7398c003d7f847f6925317bf07e278

  • SHA256

    5d43c9ac9387114e1cd8cc41704d68717a36a42aa895933be96d6ca1f8fc56f7

  • SHA512

    c7c86d4346f466c31fd57894ab9cdd065b1fd945f21175a240ba636180e744c23cdc202aa84f8798da65baf4692902bea1670ced91ab244e4653555387d4eec3

  • SSDEEP

    1536:NP/hm5Ot5uZG495xdf6ISEmlmkuYEgm5zY/TOZKG9WxApOGzWPWTbL/4iOdI:bEIMZfnHSEmgkuYE750/TOr63GiWHL/f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7500fa0143b8c664219f3aafc5aa68e0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c493aba6f3e8927e78f8bcab37a72d79

    SHA1

    a548f09b502d52c435d005ccbc0f229075d0d1fd

    SHA256

    4e3d81f2027abc3c44eeac1ad72f9295490757d7adfc106fddfa3cd5156de7e4

    SHA512

    0f1410f333f28a8a8c29fa6a5043e597799382901823440661c0b1b8006a0ef48d138aeac1820753dae60041b882e5ab92a11ff64f51b88ef8cc404fcd9dc1bf