Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 16:17

General

  • Target

    74f372b96ee88bb6c4b5b13cb88b9c41.pdf

  • Size

    86KB

  • MD5

    74f372b96ee88bb6c4b5b13cb88b9c41

  • SHA1

    e2556e9b9d3915d6939ba7bbffada31e438e0553

  • SHA256

    8ea6194ec6187663cb604fa05fca280d3c6f5ee40d0e913854e6eb0ccd9cdb5d

  • SHA512

    b3edf0763e72fcf654b307dde706be0a5a370546f191932229a90487cf3d5b5acf1cf2f0d4b6fc14e7a350f4a0705d6773e7eeb73a846e4573720d30173276bc

  • SSDEEP

    1536:08L6Vmttp+HmkHyj/Nao38feGerF8IgVGeWRDRsQsA53WGpOKqxSxDe2WGohs3:xO2qLHe4g8f9erF8R3WRDRq3K5e5G

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74f372b96ee88bb6c4b5b13cb88b9c41.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3f3315c7ae3599bc57e96faec0c31fb5

    SHA1

    d6ebf930afc457430fcc564fa0748b389bd3a344

    SHA256

    2598a4ae21e20f345d9c7bb8240b71e8aa25b465efb197476937a1dda62dea1e

    SHA512

    fc77461d4d6f5faf79ab02d61e6ee0da1d5ce08182aa8a1a7c35f2b36377fd7e698c1580e9cd0b2d80937943e91d011f220bc7b5aa34fb6f918e9d877dae899d