Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 16:29

General

  • Target

    74f86064ca591b066786ec6465b3fdc0.pdf

  • Size

    84KB

  • MD5

    74f86064ca591b066786ec6465b3fdc0

  • SHA1

    1345f8bc4959e7b5925a9f93ad44de1429af9a10

  • SHA256

    48eb2780e69adb453275f16a2f36ef3b9c22331362f0170a3ecff5bea14d8e35

  • SHA512

    c652c7284c1737150cc86269333fd95808ea20efa80cfc0261e39b5a11487f2ca6268249c38080a1e8392294b5921a8d86dccb3925302b76e6c5ca717549f870

  • SSDEEP

    1536:ajAsX54BkApV/QW6avUr2Wm7zmLyAe1cSBtk6Y3WGpOKY62bNWRIAi/sxl:rE4BkA6jrHm7q+AeySBtJ3KYBbII/6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74f86064ca591b066786ec6465b3fdc0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1419ecccb7e3a2f9e6440e099e7f75e2

    SHA1

    5b1b9600cd36c662b5c33012cf0b93c39a0d49d3

    SHA256

    51d6b55f6474cccbbab8090499450bdfb2e9e1452514bf4d1b2def82f90e8c25

    SHA512

    6394da652128731cd2f1e4a0959b8ba548bb26722f4c5b4ec3e0d6fc5ffce981791b2209f58176ce753808ae4d0dcd4592adec8df73e41bf2ea7091bf36eea5e