Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-01-2024 09:52

General

  • Target

    7f88951615c4fe66841dee4a5a8da515.pdf

  • Size

    85KB

  • MD5

    7f88951615c4fe66841dee4a5a8da515

  • SHA1

    ba3b6f68fc3db30a9731723fbd82482638d25b99

  • SHA256

    469a99ebc475bb7ad7553175a4ab3902e7973a0f46fda88849b29d0a806cbb71

  • SHA512

    33beaaefbf07a083ecca90a007965a35fc54af2a6c21290e5d3b3a186aa96bf4c6c26e18944c8c55a88bde950488296289322e4b7655ce53eb7c81567ad0121b

  • SSDEEP

    1536:b5U83U/8pW6Jr8gMewNv9ueAeeBE0xxWJ6WkNpOPW3bKamOiW08JDyFeOAm:VkEk+r8Pv9ke70kPW3sOyGDWea

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7f88951615c4fe66841dee4a5a8da515.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8b048f61110664788bc0db1d4a9e3340

    SHA1

    01b5ced5ae012fddb95d8a6adb4d5210c5aa0d70

    SHA256

    4349af7b19797e237056366e715136162f4376a2bc338a56379f5e98c4a15b93

    SHA512

    64fdd8a6ffebe921fc8c40a21cf3eeb5054e892b675d6a1ba82ef6302f499e3b2e386b22323aac94e77580e8c7f0a9b67380e6b0b459caf89b64f184d4c248ff