Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/01/2024, 06:24

General

  • Target

    7f1dc617b95c00c3331d37f1b2536210.pdf

  • Size

    85KB

  • MD5

    7f1dc617b95c00c3331d37f1b2536210

  • SHA1

    cb3dac1594b13dc2d51148ecc6217e3aeb9b23f6

  • SHA256

    01404cfe60c1a5d3a93c87b1db0932df9471b33a76f2b347fef36de9eb3e0142

  • SHA512

    859320899f14ee04dd2bededd084c7e92b02f3e9b7a09a6d9844c0bd52af4f51e3253fdcb406747a71f8c730e72a575a6f51d333f5d1f6cac41033abf210955b

  • SSDEEP

    1536:orMxD8BbR5LN2mD3sM3s18Sh8lIFn6FoJFksKy/CC9LPWspOTRWLJpwFYIjN/vZK:WMxMdtrUiS2IFn6mJLKICCtWTkJpujpk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7f1dc617b95c00c3331d37f1b2536210.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2896

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          46e83fdacc5dda8d89fdb60ba8b078e1

          SHA1

          2cbc8cbf93b49b343452a76d4613b11cf26516c0

          SHA256

          b3accae710655044719e647e5e549482ce2f34c739480a7ec1cafdc3c6a53037

          SHA512

          592627d49bfc7901587dacb865661163dc18d0ce3b00d7e08a8a802e8c74cbab18d08a5cd6e9cb74d62995305b04a8231dfe5b09c975ca624b3c41f7be1f10ce