Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 20:15

General

  • Target

    756b198d15dda28ee23db50b5f23989d.pdf

  • Size

    85KB

  • MD5

    756b198d15dda28ee23db50b5f23989d

  • SHA1

    329ed83733b58dec84d798a24ac3b8d2228ee378

  • SHA256

    e394a3140f751e66cfeb96e328abd5acc7d4d3f44b86b4552aa51bc73adecaf1

  • SHA512

    b14c4188a046bb96997ea83419709e1c747e154e9e656d82705a0c02364bbb73e1b00818683f9f20459181c35561870ee02afd54aa10552e3a31997d34b37875

  • SSDEEP

    1536:FNdEHEA/v8cFsypgnp9lfIi1tD03+6EKbtoCHCSOyLM8NUVKaKWY5DjZkWApOqA/:2Hl/kK+9lb5XCHvN/ai5DjZTqo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\756b198d15dda28ee23db50b5f23989d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2192

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a4cbed0ad15f1e11a1ae25ac2fc8c314

          SHA1

          71e5043357e98289f9e2d06993125669089a7aee

          SHA256

          66a4654e829e00256d5458a3c38d211dee3cee79423ee02470f5472eb9fa8b9a

          SHA512

          98b42a2275aa15c998c15a2c73dc0057217283f53b421b8c4f459dade6e82e75800c76c48b730cb0196e3b312ffaae1a3d802ac862b2e1b70ca9e91c952ff118