Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    27-01-2024 18:06

General

  • Target

    7aea0f42ef72443827d946d46b9d4d25.pdf

  • Size

    96KB

  • MD5

    7aea0f42ef72443827d946d46b9d4d25

  • SHA1

    014fef393c23abb969ad5d1f2409106ce3cad0aa

  • SHA256

    a537742e2bed52a3e8eb38c40a89b22367d88f05c8b65544cccfb4eaaa543a9d

  • SHA512

    a43bd416b0dc84d5fdc800cb348a409eb758c1d9ed59e28cfdf200a5cf4a5e4b8a8fc26ce5331fb38eb65480408d298a33aa0d2db6823860d5d9da1f4a66b20e

  • SSDEEP

    1536:tUvBahfIXQSiaAGDxhn8QehB/wbVaXJ+5v/s8Q31c5PCxWHiJhl0VAWkCrKluYU0:W8fITdAGDsQej/wBa54Mzl0ZbCGxHk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7aea0f42ef72443827d946d46b9d4d25.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    06d3882f8f52577865daa1e6a883b1d8

    SHA1

    41228e3a34660b30392fcd3b5c55f485f5e4d16c

    SHA256

    b344fd963b212506edc0f0a0481fc8260b93e3de52aa2352ef1c0ac72ac46f53

    SHA512

    4352723ff9b946e8162fc89fcc8d6cd5a6efad4db62def445dac998695d9eade7aaca83236e990242ff29b993cda67a5273a8272d35d53fc7df3292826135be9