Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/01/2024, 07:16

General

  • Target

    76b8c036b4f1d69ff5aa29e163f13b76.pdf

  • Size

    79KB

  • MD5

    76b8c036b4f1d69ff5aa29e163f13b76

  • SHA1

    8ec7fdc9b548742142500e46ba0347edb99bfe31

  • SHA256

    15825d7935b09ea6ded90ac69738f8462f23b3745b5c07d4d348082e81ed6aa0

  • SHA512

    6730aae9fe2976f9206e43c07060bf2727277560877688a1cfe3dea0861d9c82ca8e8fa682f3703bd71b80255f7e770d59a39be9189294b4ad1ae8e9a0600963

  • SSDEEP

    1536:Om39SjdHjt2Cl4Amfr4nAK8FS+D4u7hHKT9vYsOSWw:13UjVjt96LfrLK8FS+tdKBvYsOU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\76b8c036b4f1d69ff5aa29e163f13b76.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0934e18eea58d8b63b7a6a1bf754977d

    SHA1

    5ebbc8e841030235c2e15e33908ceb93a1ea7d7a

    SHA256

    d2b418e7fa7aab79c997fb23c056193da1e2e5c74d60cf779c1def651a3bc844

    SHA512

    0c79e3ba6a9f6005e4354043c509ffbd9b98dfc22a74a620f2779dfdb05aa9ecc2283684996e7f080e49cd179655fabfa8d9a431a734dcafe766c71686e848b3