Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/01/2024, 00:54

General

  • Target

    7e7382832e6e868bd4f415585e4d6c45.pdf

  • Size

    87KB

  • MD5

    7e7382832e6e868bd4f415585e4d6c45

  • SHA1

    37773cc43f6113c91ab2f28210a481bcac608550

  • SHA256

    45a2cf85242f1289a255573911437f0566168b55a4c450248147a72b2caba259

  • SHA512

    132f561c10384385ec9639b45c188a1f3e1478f619d223b0bb3be79262a798b8234ae5b9f3b206ced192e9037668819b188f42662a701f3d818e4c1cc55e717b

  • SSDEEP

    1536:9cob1EzB38XKsvEVCgS/xcbW4vInX8xBbLF/0XAVnzPW+OTJDqvgeWapOnTgm7:0MXKsvEV6/tyxB/F/0wFxOTJDSgfnTX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e7382832e6e868bd4f415585e4d6c45.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3020

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          61c77bc199f7743415be2b6ef5742f49

          SHA1

          220d9496bd8210c09d5adb6cfe1d2862064084d4

          SHA256

          33382056d1497b652ddf08d95852cb36d9e876d8ccb39c3a44bd9c33cfaf3f5d

          SHA512

          c7700b724552c09539771b7206383f32bdb512337b6a98c9500ef06349dcc0718fa2faecc4d68bef28ee1bd38dcff90b29181a359484cf1871320036c2b01964