Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 16:19

General

  • Target

    74f3fca0b4e9d095f8f4a1927a6e9da9.pdf

  • Size

    47KB

  • MD5

    74f3fca0b4e9d095f8f4a1927a6e9da9

  • SHA1

    a6f244f6070dd3df4317d8c25a62387676e37470

  • SHA256

    9697b6fa5775e964c9da0e7535a069150262a40fac528b34ce7e4f380204ff0e

  • SHA512

    25b93a48c8ffa1dd2e886471ec25c30f70dd3158e1387d0ed667ccdba8bd2e2af74c3920d42f021a6e7d4c0922eaaa2819f5429935c8e1283e9f0cb2628a1aad

  • SSDEEP

    768:4lpEcZaYXspLgldxeyOSKD6iiCHlvlR/iIgeGAK9ORG1fWyEme6Q29jk:KB4YaQzOSKPdHldBiqzKT1fWTGr9jk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74f3fca0b4e9d095f8f4a1927a6e9da9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d7bb090906a8da4e8b1c5c58a830b32e

    SHA1

    151014fadfbcde275408b9114ced2ad35dd8d9d7

    SHA256

    f8915a0417d095b2f5bdc1dc32fe44f12f36f0ff23a404d38062c127383a2d6a

    SHA512

    f629fa95b8a1c2c125dc30b0a053ef693257369f1e7620715e8f69863faaf0ab929f17a6425e9c060e93eaeafb9cd38394a37f5cd09baf493d5659fec9f0391d