Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 18:59

General

  • Target

    7dc06a6c0fecea49bda0c926b453c7a7.pdf

  • Size

    34KB

  • MD5

    7dc06a6c0fecea49bda0c926b453c7a7

  • SHA1

    bd83301441d90554dfb9fd3927268d252fd331f9

  • SHA256

    cf8b3e7537d918f58570f7e57e610f36287eae3775dea9444bd7bafbe23fc0a5

  • SHA512

    f8b6f12a0e6547b3966ba44ec2e176d4704be01ba31790c612614d44179ae3a062cea48d174e5b8e7af3e3a3d6e568f1bf91b5c2dcb4b607f6f688ab3b1e3ed9

  • SSDEEP

    768:ryocXPpHg7TMzgL2pwSnHXtebqkSD3zE22zs6SgyuCq+s7Pf5uOKxoTdDpr40CK8:m9fPBk+6IlsfVxRB5GGwHSX8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7dc06a6c0fecea49bda0c926b453c7a7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9dc8c1e2d8f810cdd06d6edbe44037c4

          SHA1

          417f20fc83f16c99d3ed6be45fc2b486d2fcc0ca

          SHA256

          fd0beb530955a8093122d0a58f1659e4d50fbd3bcc9adb2b585bb8894769756c

          SHA512

          bae8208cffcbca8236d803cc1bdd82ff19bd9fed8914f0aeae06fcabb96f39c8d01f7be1fc446f9afaed71dc4a85310853c299a907c56c6c6b9824a6c2578088