Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 17:47

General

  • Target

    75216ca235a64a78a53fb9b938f0bf4f.pdf

  • Size

    90KB

  • MD5

    75216ca235a64a78a53fb9b938f0bf4f

  • SHA1

    dac966265f77481f8d3aae6619ce3daea89ba42c

  • SHA256

    7bc6816ea14c1089b6cebfb489321203a788a257da6c618ed6f40f79f14a714b

  • SHA512

    30af82053fe831e9ff7fa12733ad2dc51657c351bce700b46715f7a2152daaee81370c83140af70e10775c3c57bf8491e00109b0bd7af522570ec8ab2bed88ae

  • SSDEEP

    1536:pF3Q9/phvN6Op5ed+/1hfmUj2LEp0jnf5M9fTQWmpOSLWOoxANbMB:PQ9B/vp5edOfj2L/ifhSExmi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\75216ca235a64a78a53fb9b938f0bf4f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ac80a08a4ed0c7e2dd65b8ab484d88ba

    SHA1

    c409fb929fe777f9d31024083539507861abcc4b

    SHA256

    48543af14214cc818a252ac1bd67bc6bc1b3bc2b0f771f3d735f35699fcdac97

    SHA512

    0ead32ff11e57576ca8a15d259cd39474f943e07197b7cb878eb6d7c44e4d52bf71879a73b4e55a7f796aaf41daaa14e13136c98706002ee76ad515f2340bcd9