Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-01-2024 06:07

General

  • Target

    7696f47f82c0f0ffb355c7edc2f3679a.pdf

  • Size

    87KB

  • MD5

    7696f47f82c0f0ffb355c7edc2f3679a

  • SHA1

    0e3f9c280d8152ff74c0a99d1369c72003d35af6

  • SHA256

    04c482fa913cc60186461e6e67f689f673fcf40da1a055e9cff02ea738dbcf04

  • SHA512

    5cc67338865c5d0b218c99c3c62a5bc3ea174cdc03c6cdc1e6e9f60ce1a5c0bd91e4a39121bb94cfb080023fdcf21393cda45b30f922aff81ecf456b16b827d5

  • SSDEEP

    1536:i2EteYSN/PH82teYF32tHCq9WaMnJ9sHDSdvWyO4CekYJUTcc+2qWV/In/VPnPKd:nEteYqXHneztiq9KsHDSt7rvFUTGyIdm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7696f47f82c0f0ffb355c7edc2f3679a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9bd8d05e3915fcec002199790024e503

    SHA1

    93746edb3559122ff3884d154e8c2adb8d3c588e

    SHA256

    9754f7dcdcbf1b9be90b5a85ab3de2b945b8d838fed522fb5a38fe06f7d39ba7

    SHA512

    5db82929dcd46d03306cd45920e7b62eb5b9ac8a114da73e96c3e12eb244fe44e4dff9e02f0d9c0887fae65ac4dc932267cabde54aebab66003ce1f59cb312d1