Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 20:38

General

  • Target

    7575f8a5caf69e742128c4e67ee8e556.pdf

  • Size

    73KB

  • MD5

    7575f8a5caf69e742128c4e67ee8e556

  • SHA1

    cfc3828651409791b455452cd38425f015a0ff19

  • SHA256

    ec4fb4a43409703b0da79835c91348eea2d33e51c0bd7f508822f7b8e910580d

  • SHA512

    a0d75e112fb0481f84f4609a320a647a43c69e7c4c35acf08d5963064e9e56ffaf04a571d9ac2b109d7942e3f34893295609f7800a1884124fc59502de5b209f

  • SSDEEP

    1536:LNMsJkf8/1gopJNGuCgZ534ArNI6Yi3lOewXZMp9N13ogL6Aftu:i9fg1BojgZ53FFlOew63f6Aw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7575f8a5caf69e742128c4e67ee8e556.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ddfc8b6bbf15e907d7f5e8670d3ba2dd

    SHA1

    6348b650db7d87257e33c7fd07071395e9bf4e44

    SHA256

    8c0817c508a8de03c81cdb49f5ee49e26fbe4de71d08dee92f529003e92513b7

    SHA512

    06e077cc3d0d44f5960f65ec395d9331c8301bf46fd3beaaf446738266dbc9dfca9d841d6e6500814386c97a86a54827eb70fdad6ae442d92a9f73b841f433a1