Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 17:01

General

  • Target

    7509b280f07cb6e6ca14d98034bf4006.pdf

  • Size

    90KB

  • MD5

    7509b280f07cb6e6ca14d98034bf4006

  • SHA1

    03f5936d6f28e0c6917759e1bc1c2ff512689b56

  • SHA256

    585f9c0f0d3925477fd49bbe1725daaf92a4efe949bd87f512c5d02bc06f06b4

  • SHA512

    3bf70cfb6ac9012d5f0915d84601263f8068642bd9a0344dd2e533b1848364b3e9ca69507bf478c10aa44f5d3c6c3f155734952f3a41b2686c242fc6abb4cd31

  • SSDEEP

    1536:QwFmQCjTwEZNr9ZfnumqeO+uvFIfaWxjiBWFO4OHbKr5MCx66RWITPS8eaW8pO79:b8zRZdnuxeO+umH+BWJO7S5Mq3Jdeh79

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7509b280f07cb6e6ca14d98034bf4006.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    707834c75c1b29a76ef122a5cd4392b6

    SHA1

    34ceef09cfb7ef50f3d083d2b40d3705419d4d5b

    SHA256

    c02bce476cd7cc71442e0166814a74b97ac90dfb2ef70bf56d680cfa80ec6643

    SHA512

    f52bdec6d42246d331e6a8c3574955abd7c909bc6b340232454d683ef288a414997b1c5719e93b3b53515580d0f707b73a17bef1fac4518181b7005644124211