Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/01/2024, 20:02

General

  • Target

    7de00d0214a1d07078bd0063edefde7b.pdf

  • Size

    90KB

  • MD5

    7de00d0214a1d07078bd0063edefde7b

  • SHA1

    df6f940eadac477a27e5a2914bda19eb184eaa93

  • SHA256

    923cf22dffd7871bcea23a07057f63d981e3bbbd18cd2be26a8b1c0ecfded56b

  • SHA512

    bdd9e4fc7dec87c801621c02c33dd455f612fccaf799ac3f3e830048fa7028f75749adadd6f6c167d89775a693519b0c6ad75b1d254c2f2fb52eda30290140d5

  • SSDEEP

    1536:B7nmtNquY/9jtHowFOk6ioRMBxME8w2Tn9ND/1nnvtFtGKtdEQKsLeXqG8rVQWt:0nu/9jtlOMoRMBxl2T99XjdEdsLeXqGG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7de00d0214a1d07078bd0063edefde7b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7ccd80fdbe40c28ab2e8af32be77bd7f

    SHA1

    f5857d88753cf3e7e950887bba1df64974feef8b

    SHA256

    2f20bf7f496a96b83a7016686945d7ee01b0da728f7c03d8aa55b49490ce922d

    SHA512

    de7d0d3668c6bf6655cbe84a07ad84488f72ef49c9c89791e532c8ff891c49a13668c1cb8f55da3769a76f2a6e4059717bc20aef4c48a5a4eae19ddcb0038c68