Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 17:48

General

  • Target

    7521ab1438a973ec53576888d0fe97e0.pdf

  • Size

    87KB

  • MD5

    7521ab1438a973ec53576888d0fe97e0

  • SHA1

    b6f3123b2a4e5cd1b434ed1a66f8773dec883d73

  • SHA256

    b92b621315ade4105ccbff17dce226636a027fdfdb81b9194f12d1a5703f4c51

  • SHA512

    0e7b1ae7297a8c73b58023f54e71a8fb079fa3cc5839bb990816d09569b64fb116c5fd8e4a387102149d403132ed7344d475de628f34edf906da53c98e11f9ef

  • SSDEEP

    1536:cxaEP4yXKnu8scGV54jy2O7lCGdc2p8FF/nABHWGpOKCW+0oguvwnm/sdZX:qaoKnXscGTOIQGcBFf0oK8g1nmUf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7521ab1438a973ec53576888d0fe97e0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    db666e857c4bcb6b8bd0a23d66159b70

    SHA1

    c874e439a969a0d44f1f1dae7f446212a8c1d88b

    SHA256

    a31a04f20ba87d64fc7c1cc35e7a19cec8a38b770f55cdceb5cea77ba1137090

    SHA512

    004cc718b162de9b0b30a52a96a5b1f9aeb6fd3dd2bfbe0acd6569f2d07cbd7846b65917d0cbe06057b448eb65d99140a352585670899987ac9dba9e64dd0f8a