Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27-01-2024 09:52

General

  • Target

    79ecf93b4f536008817d16f5ee857eb4.pdf

  • Size

    78KB

  • MD5

    79ecf93b4f536008817d16f5ee857eb4

  • SHA1

    4419f74485d8f1f149729541d90153c16de198ce

  • SHA256

    261757f6c273400828c7b0ba96163f37bde502ed1246bc5e422b276630f267c5

  • SHA512

    c2d249aded149b71dbf6a5eda6de038c2d2a0de1c984b15b2910dcb2fa7e019f05d50e596ea9c83c6751935500f2d7f6731e48e681cff7b6578efa5cf344eab6

  • SSDEEP

    1536:mA6y7trKHXKrIAbtkZA7E3FK6XBPWwAhvBQkHvlZWbpONBNa:p6yIAI4k0EUo01bvlbN+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\79ecf93b4f536008817d16f5ee857eb4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dacbc260d0032ca1045883496c75a306

    SHA1

    abd3a077b61aea5a515456fab5ba0409ae48a8c7

    SHA256

    a22e7ba460a85a0d7d0ca95b0cfcb49a6598d81ecbabe84fc9e8d8373755ea0e

    SHA512

    39b2a88f2accc563f71c877056ddad154972f7c0ee15ac31befa07b83653a9b6c6f12a00eca6fbe9ed88f9937a82bee6ccff165d036252207cf994f8ef01f393