Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-01-2024 18:54

General

  • Target

    781ffcf1c870895901365de0277bf21c.pdf

  • Size

    146KB

  • MD5

    781ffcf1c870895901365de0277bf21c

  • SHA1

    8483a42ff8e4761020554d6975d52697731fb864

  • SHA256

    0da98175dbeb1eca5a14376ecd919ac6ef3c2d17ead61ec3c3ed200285cf2e4b

  • SHA512

    d46a4bdbbc8c0b6d062f5871a1fa2e8b2a653c03ae29a6954dfd866406ce227a579252ec2d01f951fa82171fa78b0b59eaad884ed83e15e1d8f71f5a795a5476

  • SSDEEP

    3072:LF7eNpVaDyTfyUfqHcamgW1Bs9Dv0ymaU26aEkazDbwGRx:5SNVjyUf4cgWPs5v0yjMaJoH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\781ffcf1c870895901365de0277bf21c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3202f8d2cbf8b77796d82eddf9e06a31

    SHA1

    9833866d79b50919681960f244047067b470d6ab

    SHA256

    b68070e0554a1902c84ed53d0315cca921f6ab3148b9307b0fa182e3c7262693

    SHA512

    f245429071240f8bd11a972b1df99fe255cfe9d617e898781c8a33d826e8fead1e5df669743f83049f63feb6450ae6c64e904bb20c06b6d2f75b24905c062d78