Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/01/2024, 08:31

General

  • Target

    7f5e7adafd3a2c4147ecdf347a4011ab.pdf

  • Size

    90KB

  • MD5

    7f5e7adafd3a2c4147ecdf347a4011ab

  • SHA1

    eb9915f05915b1a2e03bd290700e33ae7c491685

  • SHA256

    09e4660328109ee0f826808418bc2a2b94c445d3316a5d6a441d8a30b2413271

  • SHA512

    5b3e3f892463e150d9edf64ec679d4c4905674c0b22f713a543634da36a9b4f0966901e4097cb195d2fa947a6a52351420fe7d2723044bef2181c159bc7c3a5e

  • SSDEEP

    1536:KLf3bzs8TnddvUphriKVS3J1MM1tUJ+CNRkdE3WxIwDH5w0CbyWxApOGm73f:QDzdndNoZi4kJRtUJZR8HH5K33Gu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7f5e7adafd3a2c4147ecdf347a4011ab.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2304

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ec99d2e9506567f73974f68042d83b3a

          SHA1

          3a5350a9b97e1fd27c390b3d8b621f8ff24925e7

          SHA256

          a108ffc6630d2838c42461ae7ba1a8e1d12aeda4397a685aa5b581f47afe8a9a

          SHA512

          f7cc987c05a00b6fa45b48ade1256b22540f035dfb2e02225afc88ca5f8297be565a3d59e8766ee3658fb324ace0a9636f0a79a0ce720855c75788d972d4a8cd