Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27-01-2024 00:02

General

  • Target

    78be21f01fcedb32231b15ae584bf3fa.pdf

  • Size

    75KB

  • MD5

    78be21f01fcedb32231b15ae584bf3fa

  • SHA1

    b99c8f565f89a1266ce70e3ffcdefcb16a755e16

  • SHA256

    27b6a9e8d08921881e9e292e19519da25706cd78ddec6b8104aeb93f5f53b1ce

  • SHA512

    6d9162331f988bc3edb3061009a13684175b52a4b67bc978e3a1426bafc4eb420e357b2cb13319b7b6e089ed5ec8447a8c2091d571231b7990f5dae6c5c02561

  • SSDEEP

    1536:agLpsfYXfItu1JdRt0cWnbK10VgVQ8WUsUC7BE+420bzWUpO9WAGR:hLpqFtu1HRt0cW40L4nUE/Du9Bg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\78be21f01fcedb32231b15ae584bf3fa.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    93194fa3b9af9b4d4fc788d928c2781d

    SHA1

    6d904080689e243e171b295d42c2e2320faff3d4

    SHA256

    8275f2236ab9ba37b9883f6397dc6848a73fee43974b8c4144e803bb30a0d791

    SHA512

    f4d5889e7f99c9efc5a722431700ab8fbd7950df749f7229b50bea0ed35210e870403370e69cdd2a92a41f131be0f7f834eb74cb41093266f26c078ae856663c