Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 09:45

General

  • Target

    79e9105bad78620dfa7c3429785dde4f.pdf

  • Size

    74KB

  • MD5

    79e9105bad78620dfa7c3429785dde4f

  • SHA1

    cfc14a7a6b0bd13e64fd4a407d35a962c15e6e2c

  • SHA256

    2bf19bb7016881df82b98011b2508724b5629012321bbeaaba030f98dd5000be

  • SHA512

    75a431455402142622054fca2ffe2b35ed308155ecdb4386dc1852c4d21b99f6b85d58b6dd49f6a66c333163399446e2a47381c5fa06c5bdce8fc2b41a58dee1

  • SSDEEP

    1536:tzyzA/4QSo5MG6Vlnk3zBzhq3UGCYFjzqrEslHNW6Xq/Urk9OuxLnYU2+:tn/4QSomGXWErIW42Xq6k9OuxLnS+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\79e9105bad78620dfa7c3429785dde4f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a631c296e2eea8f4306eeff2256cc5ef

          SHA1

          2242cec27d4bd839deb6951a370255038eaff213

          SHA256

          2e3ceee699a96f6b64025a4697ea1666f51155b9940059102e71c0ac2d9677d5

          SHA512

          96a415fb2c665f1f5c0277b84b6d1be5de2fbba07713d49591ea22bbe322055c9420f043f521e3c2072433d7ef48c1a6857ffe4737807e8d200876b10a6bf83a