Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-01-2024 07:41

General

  • Target

    76c725c643cd548ff6492e58a4ad47fb.pdf

  • Size

    42KB

  • MD5

    76c725c643cd548ff6492e58a4ad47fb

  • SHA1

    a7d47cfb68d5bf5e1f4b2da046f3e354d61e8dfb

  • SHA256

    985059faee1b600d01f6a3df3f637c1be7e93317d6821c8e6cf4eeb206fcfddf

  • SHA512

    adb115954318a8e592a1528e793259dbc7f6556bde9b4fa39d36501e051af476b5105a47eff476d14ba74d0603d3980ca4ef5ce9e6ac236afc85ba81b4a6dce5

  • SSDEEP

    768:yci6EMYgET+lUTQ7x+n9fFpeBncGUi7jRC4rEyFpVDzZ1HFJeAluksa:Fi6l1ETnskMBnljsny/VB1XeMuksa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\76c725c643cd548ff6492e58a4ad47fb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f2c3053c51862de2ae1eeb329c4ad035

    SHA1

    62bbe952a13dc3f74137164cb65dd3c3ec388451

    SHA256

    f345a0228bb3cf1cd6dbd54caf3d66248a08e2ad65388df5c206bae838f47413

    SHA512

    b5ea1094288b81a93228b2662674dcee440a6bda45beb916303b95c7c1ae425614ab34cecd2176e9f26d771a17d80dc7ecdba0945e7bdcc3c48342c32541894c