Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28-01-2024 09:28

General

  • Target

    7cc3b022199bf9482dca05e450e23aec.pdf

  • Size

    87KB

  • MD5

    7cc3b022199bf9482dca05e450e23aec

  • SHA1

    c294b4684fd443a01bad9d6340b18b1e7372dc15

  • SHA256

    28924c2489dc9b2fa3ad1358d8afca7b2c46befa394c3c23e79238444dc0c165

  • SHA512

    43f3d5158f3ca230c945b07f62cd853910f1d47eba559ab46ebd1c6fe8cd3a597ecd0681ba2153308bc72402cc9bd2312eae6fc2954db3735a5b85f9c4fe9bdf

  • SSDEEP

    1536:9rKfipw7xYdbSS4icTnErtuD2hjw+frsj+JDl6RAi8OWapOtQHWU9raOSLa7:Eiw1YdbL4iLu4jwUrRl6m9TtQhdS2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7cc3b022199bf9482dca05e450e23aec.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dfe02be732e7910e030ed7377af0925a

    SHA1

    ebfec832af2e7da9e731458c57d9c353bb7fde14

    SHA256

    616507ecc8979472ecc83c6a486a7bead1092c72ea911720e251f4f1ff62963e

    SHA512

    0f493a8ba81e7e58dfd5e8211314b8a6aee3cfc8f7d0a2b93b59bc468898fced299dc1e8c15911c66a387498657db09226d8e7eb4403d310fbfaa0b9b9c6ed40