Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 18:35

General

  • Target

    7db4b53d8bbad380d6f5dd19aa4fedd6.pdf

  • Size

    85KB

  • MD5

    7db4b53d8bbad380d6f5dd19aa4fedd6

  • SHA1

    6baac689ce1bda8b48647921b9e0195dc26808c5

  • SHA256

    8ffa294971b7b01ec0a81fed24beecbc151303246f4e9ecf624011fdc434ddc7

  • SHA512

    2f50367ede8a42504ed6dcfcd747fe3057f237264878732b7fd561927cc239cb5ec2d0820fbaa68b86e3917eb528a3df4247748a024ec212d49dd3c1d1e9ef5d

  • SSDEEP

    1536:yWfVo0z5NxxTZlVFjpFfyYpifEmXqmHD1vH1xsUcVVATxs6W/Cy8jxJ4HnoMW8pZ:r9oaxPZpF6GiOg1f1WUcV2NsN8lJ4Hnp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7db4b53d8bbad380d6f5dd19aa4fedd6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1228

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d73f674ae8b587a44201b8ff575cef1a

          SHA1

          fc307a487bd90d0d595b48e3b50e9bf18cb085fa

          SHA256

          4c2dea27e96b13cfcb37fd7d274396b83c940e38bd4cb77b7233bd31be840b1b

          SHA512

          f6b08b20627169cd90734439c421414d6eca8e12d2279f526277e89afefa8d638d83e14b71d381e928eec2bbc99aade9aafa134206ff19c1a652e4e3aa55e47e