Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 07:19

General

  • Target

    799d43b2eb0677613b02445c45c170ba.pdf

  • Size

    84KB

  • MD5

    799d43b2eb0677613b02445c45c170ba

  • SHA1

    19280a94c1f9bfafb26042a1e2b9b4376317d2b7

  • SHA256

    963cf012502a00a02b532fe804730186556cb47a3869c2f4f869fb5ca03b508a

  • SHA512

    de6175f73633b8cba9d9bff67e97418947c79376f9764445cd2de4a58a0e3e1d7b23be832320dbea7a1fe1dab112822eb43e8d1556b464feb7cb29f8ab9a6de1

  • SSDEEP

    1536:vIk0+UekeylOHoJluL1JcduPXmEpp+IlT5ooWOpOwrKWECVJTm1RiJ:mXe+6oJluxJcduPXb3+IklwrLmg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\799d43b2eb0677613b02445c45c170ba.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    995399dc8afeae40ecba8ee22dae0730

    SHA1

    63007a6b2c8ca9a378c2eb8e802bb18581aa6bd9

    SHA256

    d1bf0c6e9a2e1b763af282d3ababd357eea9da69bb5f1c70fcc64c44626c37db

    SHA512

    687ea9c17989dd8057b8d08df1a9aece86b75d8da6d42b311673ff71603dbe513db2d16eea8ee8ca22c7fca58fcc474a2175916bf09fab11197abff86fa90b06