Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28-01-2024 01:42

General

  • Target

    7bd36ebe179022c7e3de59ea1c45f1e9.pdf

  • Size

    84KB

  • MD5

    7bd36ebe179022c7e3de59ea1c45f1e9

  • SHA1

    86574047196de513342678c98cb13b8fcbc16f34

  • SHA256

    afa265ff4903d93ad33a4e5b4c4a3a6194c30ef3a4dc937e45f3ac3f6689a37d

  • SHA512

    46465993fa9b1772f5bc273d12102deb646fb22d06891ee463479e4897a5b934caa6933444c4b3633cb099a2f1d40f30fed5dcbefa4bca02ab5e8199ff1672b1

  • SSDEEP

    1536:o02YdAFWTKiKud7OF63Ezr+QXH/MS0Z4zWQTn0/ibREW8pO7NhCd4:SaVOF+EfbXHkS/4/ibRX7F

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7bd36ebe179022c7e3de59ea1c45f1e9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    52c07ef4796a8ae81c161a327417d3c2

    SHA1

    ad384161ac2592c69bffb03a9c9beb1bcbb9c19c

    SHA256

    141073319b63bc50cb4dcfead97cc30833c4c8b8e3da5133e928106eced14f24

    SHA512

    b2371c9a9de326ae3b93f1a22ac36f34e1c8d0a28592e65f7cc96ce556a514a6e4298d0a3cb893acbceec4f2317116c966d428cbb766d193ef9ae90bd90e2558