Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 04:19

General

  • Target

    7c21eabd5a67e12487bac3264ec0ca29.pdf

  • Size

    88KB

  • MD5

    7c21eabd5a67e12487bac3264ec0ca29

  • SHA1

    92f81fe7609272add1272b403aa42f9c5999f3df

  • SHA256

    bd6e8711b88e5f56adec5b11bfcdc6d585d8b97ddb1d66383c55f8116f5517e3

  • SHA512

    a997b5e5b73966cf8803069ba82d6ee75f1d506f9479c448111c8b4e3b71482b6cb8d66527ed3a852f6d919bf3af9ec95ef6d32f17ea9db9fffed5bdc1cda081

  • SSDEEP

    1536:ALGai9O2mW93ANxNYvk+NmQzF9YF+WQLJXveHeczfXw+FQhQW6lQWepOyWWixs8D:GitmWhA+vRNmSFKF+WA2HeU/dShH6vy4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7c21eabd5a67e12487bac3264ec0ca29.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    822988459a2b447d90967c438141f4f8

    SHA1

    b5f878ffae5b7dae4947c611645116810efe2552

    SHA256

    1f76f8bace21a5b5ea4895a50b521c5150dad0897e84804c3aea30b0558eb616

    SHA512

    0ed0fc7d1e26ede12e09e60f7a0a38f75da5edfb96be756676bea878459f6280be5625cd8a137b843b25047a7e848ea4e8b86a7573e75a03addd0f630fa4d8c4