Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 04:01

General

  • Target

    7938fdd8a052ef76c1001b949b90b1ae.pdf

  • Size

    90KB

  • MD5

    7938fdd8a052ef76c1001b949b90b1ae

  • SHA1

    015ad61b5ced6f402caa7e4616358c6c5a1eb743

  • SHA256

    caeacee75cfc4f32dfda9eeadba3c31a4bec18baf1d0c82944cfeabdb1de3892

  • SHA512

    95ba095fe5c318cd5470fc1e73ee97144042fb64ba819ee48ababf0099cc77e905d02848beaffb4fdb1d4929ba67b3bf022f48d42d53113a2d4a481206820e96

  • SSDEEP

    1536:2hqrgKwJv7iSmRRrFJfxGwueVWJonaEeas2DqHtjvOe/FJAr9n8WrJPRJWPWOpOV:3OJv2SmRRDuV+aHCDqHVvd+r9RaMwrQD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7938fdd8a052ef76c1001b949b90b1ae.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    490a2ba6db15655e0871cf3685fc75bc

    SHA1

    91e40f986d2e8a73f47118b9ab7476931f7108c5

    SHA256

    89d5fbaf14f786f7f9067fbdcb350e5c690d50c4a07b3bf51da1b99d35013f0a

    SHA512

    fafed4d2579288c886f890f998c43b46cfea67aa3cb1864dbba3412671c6b185733470ae1190607449eb68d71c4181fc0a27f8121cd48fb0079192737fcfbfd7