Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28-01-2024 12:40

General

  • Target

    7d27d2f511055e734f6f8e8013c0854a.pdf

  • Size

    87KB

  • MD5

    7d27d2f511055e734f6f8e8013c0854a

  • SHA1

    9c26b120311f3c25f291be96ee21369707c56b87

  • SHA256

    4dc2d4c8c09a3a48411c85c16570e75703f4d397c802f4c3de297c0b88a57b87

  • SHA512

    68892bcc0d9f49b4e8d02ab9d0c5ff898289982a5a8e5d6d66ebb927fb2fa0dcbd155af3041f22acf2fb78de52a16ef08dcff2ed51fee2036014085127fea4f9

  • SSDEEP

    1536:uAERpOCXOX1OhSzSqHDRS0R/j5UtSPIrWypOlLkfn9eWrOqCVeQ:ApOPFOkrHVJjUMNlL89hOhn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7d27d2f511055e734f6f8e8013c0854a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3851b250e4c71d9fb7a25ffee46cd2c0

    SHA1

    cbc326ab57cebdea481911a72c81984924d3e2d6

    SHA256

    9e40468e6dcb2ab12ed402260440e565a17e71a15219549c6b0abaf8bf05ce9d

    SHA512

    3cd3f063753022ca017a1c1a18f007887885cba2c6e5229b3e0e40f8b9971a2086e10386b9b425465f95a7af58c961ee66c52242c0ac6e4e9f22c89d1d214d51