Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 15:59

General

  • Target

    74d5900bcc2f9668b523f155764eb606.pdf

  • Size

    45KB

  • MD5

    74d5900bcc2f9668b523f155764eb606

  • SHA1

    85b382607396ad5d55b158c0448dbbc5f4d9f48f

  • SHA256

    de3fbea40db81b199f40c5f79c6c70d6246c00e5d4d25091df2cc5c54df479c0

  • SHA512

    d89657fb1e2c606128d99d7cdca0ab2f3472a33f56dc22678fa386abaa0219424bc471bf40e696a9db7b8bb76e74e1b9ae839ee665a402daf6f6983972432c63

  • SSDEEP

    768:54BYQ654co4vpB3An9Msq/weAsR9WqSGCe/2nD0+VaZPNMMtzLUBQ:KgqcoUzhAsR9fCe/2ngIaZPNMGvUBQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74d5900bcc2f9668b523f155764eb606.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1c66d8a0ca97fbe6db557da5a122cb3b

    SHA1

    3d2b234def64cc92cc3aedad309ec8b0938d5455

    SHA256

    cbdcbee0a33f6620deb54902a946ccba8268cad4fc2ad000d3f9b29bb7b5b27c

    SHA512

    297dfc9e9257b4fd06c27a6aacd6daf138352adeb999a7b238ce71b11871c071611cefcdfe4fc541f7275284f77263040bdc37a197f1c04e001ee01b38717d76