Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/01/2024, 14:53

General

  • Target

    77a6bc09d17fe6a27eb76728b9eaa8ea.pdf

  • Size

    77KB

  • MD5

    77a6bc09d17fe6a27eb76728b9eaa8ea

  • SHA1

    79dcf186576bcd5838b994e9ba994292d8edbf1b

  • SHA256

    45934cbc0fbe16823b2507969d87a47a41fa9920ea4849b65a567e52876057b5

  • SHA512

    d7a7ac7901a40754f036edf9c8ae9e747eb3ae6fadb1112147ec5df58a4442a1a2185c0dfb1733057f1e392d474eae8021a20115be4a9028580e48be7711572d

  • SSDEEP

    1536:Q9LjCSkXYPdK8+kb4cyE8y6eK1X6aH39q1vX4j9HDWUpO7qWr91Ox1Z4Iaw0rPWg:SjCSkXYIQbpYXv6al9H27d91OZlSx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\77a6bc09d17fe6a27eb76728b9eaa8ea.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    17c4ee2e5d48622e691fc815201eef21

    SHA1

    644743cec26b1d4c864a764536afe5608a545016

    SHA256

    ab22da243be4007867cf601c5f2c50b942c489657f51bb64a8dcb1b4733e799e

    SHA512

    b23aaf1373935dfd22da4e027a81dc10eae370a0f1576ac738413a1cc083ff43f7438ca3c39666d8691e023240cd29fe5d89232022f018b67c02a2b3cbd840af