Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28-01-2024 20:08

General

  • Target

    7de27d04a5e89c86b78a7bc9303cbb2f.pdf

  • Size

    86KB

  • MD5

    7de27d04a5e89c86b78a7bc9303cbb2f

  • SHA1

    e100ad9c54dec172e3ba7589e8791a5976daa1aa

  • SHA256

    070d291cbe3a708527b9aa4aeea986a966ae24e438e7538a9b06d35a70973bf9

  • SHA512

    6baad2f8066e1a067bb51ee7df84dc0e5ee3a35d1f7c48d101ae042a5e6549a0fb54b8ae1c5a1d950641fa8854d0fc0992b4ee4222bbbe605e0480928a65bdae

  • SSDEEP

    1536:DZzJSFafgmY+2HAIXpgVlH3xYTwOz73rtde0oyS8D5W4wdJY3AWypOl/NPPZW:1lUafBzeA0pgVVBAH7bttA8D7hlq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7de27d04a5e89c86b78a7bc9303cbb2f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4f4b57a2fe7d8d681213bb3ac8efc594

    SHA1

    3b13b7be479b34da99e62ab79d964f371a0aac3b

    SHA256

    246a0abcdc38b780c8f1f53a0260a67ac2bc9b645f2cb0844c8f6d13bde44909

    SHA512

    2f183f66f6a872cb37f4b931e0f33727032984b07b1dd541cc11908135985a86f22895fce6128eedd5f40929d27b881c90d9ebe0498269f84da8201404b3a919