Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 17:23

General

  • Target

    7514ff0534763c7d5603b75da73a6b75.pdf

  • Size

    90KB

  • MD5

    7514ff0534763c7d5603b75da73a6b75

  • SHA1

    9a28bf09d405f9f4e612f4a8d5ff5796275263b7

  • SHA256

    ec7d5130e0f4aaa1a0ae279add988bb9d858dffa5fc1a9affc1f659299c04c64

  • SHA512

    0b6bf06c6e022ca0f746b2bed130aa4c0e5e5bf5d5ca864547c252a485f5e8e385e35ec7e56f4a7d8219068693b70c42c5b14a3541d8c50491f9559609b8318c

  • SSDEEP

    1536:KWJDa9qqRigJGwXfZXvQfgxqjwmQ/cl6c/Nl5pmlWapOtQCb0W6zmTvNMsRMcMzv:rs9qpgsg2y40El1LmatQQCivNld2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7514ff0534763c7d5603b75da73a6b75.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    38320f9145e5d16000f4d213f8f8377e

    SHA1

    1b56c6b19d9300df7d2d9377072b90f83b0081e0

    SHA256

    b08c1c30497fcc4843f51eade0fb40fbeb6a0cc6baa59127d4fc94c8da33119a

    SHA512

    2e5ede3d13c48520c2b3f8457a7cc736314a4e8ab9e5cab283d0ef353fa351f8c9d88dcdee4337d226d490ec41b03d2c6a494fd43637b5caa965fa10cefdfebe