Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-01-2024 04:22

General

  • Target

    765eee0ece7302eb3c65cf3c81813d62.pdf

  • Size

    35KB

  • MD5

    765eee0ece7302eb3c65cf3c81813d62

  • SHA1

    748b0752f7a63aba3f18a5eb8a496e678183b9a0

  • SHA256

    b6b5af2587ab91fa010d9901051e9eb4c0983e9fc8ef1f80d0e4350624d3056c

  • SHA512

    a8b3f31d5231d626e937d859c4aecf63f52ddcf29591d4973527ecb726eae024cd3df4961b96ec8a88abc345e0d3e8f23b2fd1781ccced7017e5245e6bab8432

  • SSDEEP

    768:0PfDZKyys2IO3iLHNeXlfxMd6l01pF/+SA0lll2Tp2CN:AfDqIO3iLt0xU6upF/hep2CN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\765eee0ece7302eb3c65cf3c81813d62.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5167b4725cd2198ba8ff4efbbe10b8bf

    SHA1

    7558d9fcef6f35803ae4cb601040e3fdc48670c5

    SHA256

    8729acadad8b38a098974ddbcac040eaca1cf25775d01f17f9754311541c06f9

    SHA512

    25dc7879f2a90b5e6ecb4dc15c59e932089d6712e2332985b21bf8df1e5cea1de8f9b68e3a1d2f6772fdccf03cb3ef4cee0e6799a0fc8a4fe619a93563a9d732