Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 07:16

General

  • Target

    7c7b215e107af651503a5c3ae0b5caed.pdf

  • Size

    44KB

  • MD5

    7c7b215e107af651503a5c3ae0b5caed

  • SHA1

    2a7d0509ba93f6cbf284825044da9c186b6a5eb5

  • SHA256

    9768c16e58f0adfde42715249f180cf8620042c250b7f76bd6b031e8c0ce50b9

  • SHA512

    ad5b89f3462d6cb42be2c29989d31af9c3fae619fa3abeed6c04fcbbd8261066cbc415e81e8309a8ce500fe96153e2ec5db1ab83ce972ed6e0c481d74cd08b32

  • SSDEEP

    768:Xjrck09vfVBusKwFwRvOYKNwKtuzodfbd61BrJi/3Cudzxd+izuC:T4k09vdvF6fugkdDo1s3Zz+quC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7c7b215e107af651503a5c3ae0b5caed.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    712794102778fc068b8c61d454549e76

    SHA1

    ffb6bcd472004f0796598cddaa68aa66888a3f47

    SHA256

    5779afffd70c4274bd677b39c24cbf5f4598e88c7fc840119ef1941cf54f2024

    SHA512

    988a06cd46a3dca96800ed1f9da6f7905e5c4c33d8185ec4e4bc486ba1a6d891f2a5bdce8197f234a4b1314948a414e0a7c2cac27de87299a435a8a31cb8a688