Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27-01-2024 10:12

General

  • Target

    79f73ca9e79b280fa60252035f0ab858.pdf

  • Size

    93KB

  • MD5

    79f73ca9e79b280fa60252035f0ab858

  • SHA1

    5fa0cdb3634a15ff4f0f03e3908128086a76cc56

  • SHA256

    fb5a920c98ff11c1bdbbec4cc9ecfaa008262f5d5c966bec47f1cfd3e76d9027

  • SHA512

    e1171c792e29bfade009a5993aa56b2e24bd5736db9757871f34e71eddc052c771923f503ac56a480009aa4a7e22e33895a59658c90490a2897527eaaa2a98de

  • SSDEEP

    1536:u4DQCKtwpfpG2AicTOgXwMPb3wR7twcM+TADYMBsx3Z0Ga1pD89WADXy2bo1QW6o:dQC19pCRPb3wJqcMdYMg0Gar8DC2e5u+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\79f73ca9e79b280fa60252035f0ab858.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    464ff841b5782fd4dd29d31c12cb4490

    SHA1

    ecb927b629bb86e913775e2f3f4fdb3b47ca5c97

    SHA256

    d4c68772588c5ed1fbda1b5dde139656c9cdc9748f9ebe170ab4a436d84815fc

    SHA512

    4c2eb3e526de591bf9379b9440a95b15021c04baa7cf86c4ec73b288a01f8efa05c2896b3656813f52e5852df07b3cc4ff055eb0feb6072a2a5a1cec42f48189