Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 02:47

General

  • Target

    7bf29890d5f24fd4e50681fe08ee3da2.pdf

  • Size

    87KB

  • MD5

    7bf29890d5f24fd4e50681fe08ee3da2

  • SHA1

    28c62b9f751b26245ad3f38f7d711ce65492bff7

  • SHA256

    85e8a4fc2fd3fefb2c7d83204209fa2fbed9c0b703ad46f8b2cc7fad2e701b72

  • SHA512

    ed6eeb027fe2cbc4a07bec8edd74def50f5dd9e7e9657ffceb072a58ae60a42f0a1667890960e539f7c24cbbcf514fe8f2c9c0293f19c4aee8adb7302c20864a

  • SSDEEP

    1536:oRBDDtAXDylVHy3ysH5BjJdi6SBqUY7ervRBMSwF9PWOpOaZEWDuNz8vnDW3A:2DDmXDylp2ysZBjJdiLjYSCgaZXaz8vH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7bf29890d5f24fd4e50681fe08ee3da2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2672

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0e6a49cbb90488120144a70fefc02b1f

    SHA1

    2cd7a16db8874668ca9421c2fd061825577d9cc7

    SHA256

    32bff41f58953be5f2a2db0e4684f148901c67f471ec7bc94593d59bd1cc8acf

    SHA512

    38b5443f62a33a3a48ee33a965c3fd29679b815c87a509596614fb171c97d53b7163438cebaa384f88baab38f5affda7246f140b08d83cda58079308fbd661d9