Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 00:46

General

  • Target

    7bb6d499b9fd8f3d7aa678c982d688b1.pdf

  • Size

    85KB

  • MD5

    7bb6d499b9fd8f3d7aa678c982d688b1

  • SHA1

    837afccfc284a40a3de142501323c8f273583921

  • SHA256

    92d25b6d654e0471c2e187e1f22be247c668cf94a5e995088ed5907ad2754a04

  • SHA512

    51588d778e73379e0dbda3b918ddb5954fc5ff246fb01acd591e1f9653a3a93911c9c0b164b5d4722480da615126d12b079421050c067d26d1e739c7c87d7189

  • SSDEEP

    1536:PbxQ66Feb3uD/uvJI9pujOIlVGWD9s4D9oKTgV4P2SqZWYpO2Q1X4Wjbbt0pR0uo:T+xFc3GuvC90OHwC4JoygV4D2Q1XHbtZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7bb6d499b9fd8f3d7aa678c982d688b1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2512

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          13e3718b3c898278bc3f7ce25b70c0d8

          SHA1

          bd422c2ebb331617ed17f48346349741b37398f6

          SHA256

          1cc359760bf5f9353fb4d55107f61015f8869d0545617b61c326d4d41355f60e

          SHA512

          0992ddd971b1b378a51bc989efa47d45f8e7dffb8e98ab9f48bf9f4c4d7cdffa62cd7c23d8218919f4c4d2bfa399021665a426b6b0a7167c810f177462dca089