Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27/01/2024, 16:54

General

  • Target

    7ac6ca6d28332dcdc5f456ee9b261c1e.pdf

  • Size

    91KB

  • MD5

    7ac6ca6d28332dcdc5f456ee9b261c1e

  • SHA1

    5ab3576bc30166a4a6c9a7074b7cdeada030ac06

  • SHA256

    8abbdad2e035a393d8d40a6c0fcfa0abd262eb185e43a48390b407f61f96ffba

  • SHA512

    7c05fc1f73beb9765add4e70a37fb0489e5d626a8b6453377ed30edae62237d975bb52290c501a3e98a834def999aa1b1b917e0f20984a9500b948a68130917b

  • SSDEEP

    1536:4Deg7b0561y2xAex71zc9DFEhhKanu96JWW0x6m/9occpTW1b5RO6/WapOnSqM:0no5d2y0zsDFEhh1Ti6m2ccpkb5RxInk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7ac6ca6d28332dcdc5f456ee9b261c1e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    db9cd3772738b691447b1137bf8e445c

    SHA1

    d3af0e0f001638167b0561b1c1e4fe0b7f72772b

    SHA256

    cec8e57a907bb2ff43990f99d05b0332b2b53aed90537633b4d290f8527c7aa8

    SHA512

    a75ed9167c45c1906ecfd953ebc7bd24b7444a297e29d2d0c7e2acb11a037b297188dca43ef8137a27a8d2810d96d42d33316134dfc3bdf196b3ffe40979b0be