Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 02:21

General

  • Target

    7be534d0a1564e9c430cb5166502d580.pdf

  • Size

    89KB

  • MD5

    7be534d0a1564e9c430cb5166502d580

  • SHA1

    bed9b274872252b0b91dc2c4eda1ff51f63bd8a9

  • SHA256

    a624f180173048123ac2d249e29a7681235dcfb9c9f4f542849ddf2145ddcba8

  • SHA512

    12f42645baa8bbe82552001b33a08f93c2014a557929933947b9aba55046aea1d76f7eba6bd8ba6a83d98d35d1dc10554317cf00aae2beadf83d35196060e2b8

  • SSDEEP

    1536:Wbmzi9+oeoJItA4ArRXETyE6WzFKTpsYzZrjaWvJUkDy5FnWepOmLvZEsf8cWLHB:smg+oeZhArlChkmYVdJtyXUmlBk/BK4T

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7be534d0a1564e9c430cb5166502d580.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          64ae86dec1842be62ed4129cb0f0eea2

          SHA1

          58e57b71b4b3c98695796eec39625d852edd470f

          SHA256

          e50ebb732ce49a88d5e96a924422127f501a4d48369ff667e6a8a5214cd71426

          SHA512

          2937ba145459cb37b1a496ab33c517b8baaa451bf777fdb6299e41995809b15076bd1f929955981ca0d70a372861be061a576b8362af0ca8f5c81414c3f9aa6c