Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 16:56

General

  • Target

    7506d36e504805bf3c3e8d9b27491158.pdf

  • Size

    92KB

  • MD5

    7506d36e504805bf3c3e8d9b27491158

  • SHA1

    613119aed58568ccedf869ca1cd962ea6d570f93

  • SHA256

    4677fa99090572ae0e0f71a726842e6dbf86c85a04f0da21ac4bb08d482b90a5

  • SHA512

    1832821a5bb24b04ca10694b060a303b8e29eaefb17affe6cf8097d0a58eb43be7376869209e430ba049e2beb8968d34731ff7a1a46212119bdc54c6f8bbb423

  • SSDEEP

    1536:YDOPL8v4FdK+15L0zksyFK1BRR0ee3lBwTOdW4wfkDOMh7Ib+CFnxzqcVRHs:9L8wFdfnLw8ZfXWFCnh7I+CjqcVG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7506d36e504805bf3c3e8d9b27491158.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5e14a182008b5025e9f47d281ca7e640

    SHA1

    5b8a165253d17bf363930cb53388a15e9852368d

    SHA256

    7aa299aa0d5160f5f1f5b392f1782dc151de9295c5bc3eea609d18139d9bd167

    SHA512

    ce0c176efce0d268df3b0c4a1f02a52fe352512b9c4dc01bba748b22178dca139663b036b9ca7ef060058eca2c98784da7b94c5ec8712450329a397d310ea532