Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 14:35

General

  • Target

    7a80e7a4d7e5c3114b38184faba0110c.pdf

  • Size

    92KB

  • MD5

    7a80e7a4d7e5c3114b38184faba0110c

  • SHA1

    d78d86366dcd99b27a07f770412cb6151017ef66

  • SHA256

    0def47a10157129e5c1355b26f052206c2f68bcb237e40dfdb245f94b09786d5

  • SHA512

    2931c8e2ad145bb625e0cd5bb00456a4de24e120ca7b3fe55a3257711e58117d9ee79142b67e1058250655b4587a7ccba00ac7927d81c28871b4a82489f87306

  • SSDEEP

    1536:9U+jy4Q1jXXrnArMGg4jl+kDju3n7POyiOwqWYpO2+WER5YT7s1dInm4SjFQ:mErZMGg4RDju3n73iOwh245YkSnMy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7a80e7a4d7e5c3114b38184faba0110c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f0de8ad95d81c5c1f963c53c3b747afa

    SHA1

    e2c5c8d7865da9440dc4a2ee10474581b9eb5c9e

    SHA256

    98b49db293941a5d3df75b65e19c2186715615841df009eddb6364d6049b319e

    SHA512

    f530f90dac8ac54198fef7ef5764bb3620459cd922adde116b19acd280993bf54461efc95840d63968ea9b6e272b6baae9bdbb3615cab8a84b33dbe5f7dcc0b1