Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 16:58

General

  • Target

    7507d08479e57c3c0af3d8730da16985.pdf

  • Size

    76KB

  • MD5

    7507d08479e57c3c0af3d8730da16985

  • SHA1

    ca3704a822b702358cc8b1d665d3ba33d8689179

  • SHA256

    c16ac4b6ff1c3cbdd49022fbfaa0f7910a8c29c184b04ded15414b03946255fe

  • SHA512

    4b964678a045e7936f1fd4f1ca96d687bd3764161339f885fadf42e31e23957cb04596fa5c72d2c40db98b33ba4cca24ea5d6eb6db39ca461c76f26570bec277

  • SSDEEP

    1536:+Oxeiq6I4si/F+ZssDgbhXhk6prpdesahMWkbZ1PJJwW14E+I+Q7jn/CYzWQpOCI:yihZ/gZNUbhXGcrpWQbZ1PN4Ex7jKYeh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7507d08479e57c3c0af3d8730da16985.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    46e0e8cea3552c2aeb5f9ae0a5d3883c

    SHA1

    9f726a82e570394e3b814156ca855a278a05bf9f

    SHA256

    3af12d8aa21ea2533864f59f80058f0dd999a2890d282be6dcdb48f574ea682d

    SHA512

    9dbcd59ef5cba49c4b157fff9cc6bdacb9ab591e70519b5e676d146b4b2162953e279b903587afd5d43311abc16976d01cb1f115d0b55cfbd390a9e8aa402cde