Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/01/2024, 09:43

General

  • Target

    7f844b742025f4f5cccf58e919095ac5.pdf

  • Size

    87KB

  • MD5

    7f844b742025f4f5cccf58e919095ac5

  • SHA1

    d66ebfb2956c70b3f21ad3444c847c23a6fdb097

  • SHA256

    584f6c6e125ed9eca71cb6fdb5fc78e153c8d6ebf63663e2f48a38b3affe35da

  • SHA512

    73b1d4c6ef3ccfccb296ee2e997ed120082d7d3d1e412e11ac6e1b396f7db013c70075cddb972324cdbacc1f038bb79ea29e4f7fdc4a8be2a7e1e386b8ea1e5d

  • SSDEEP

    1536:W0tft8/WoqcjtHEInq+NME7UryZUYAMoAWapOtQCWT9uFYW8Q98xQzxFY+:v8/P1DnxNPZyMo5tQ1UF8Qq0xz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7f844b742025f4f5cccf58e919095ac5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2124

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8356e5cf108f763021c07a5f459af97e

          SHA1

          cd88dd55baf731da097c2a9a7ed5b85ea1e7e69e

          SHA256

          80087cd32c00c46fd68c412bd5021fdc6441aabf66f62c1b9fce4da26ba7c7e5

          SHA512

          784a0da90fe400863410297219c4f53da22b439e2840cdb9a3b75ac7a4a0b3a99ef50d88c826f081b214a976ceed0ad3ec8c8c77ef9cd82f6189422a78ccb7b6