Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/01/2024, 16:15

General

  • Target

    804844f465dec57a5aa8fa602d339a1d.pdf

  • Size

    89KB

  • MD5

    804844f465dec57a5aa8fa602d339a1d

  • SHA1

    0804d10e3b4dd9fbf1c81d71fc6e4015cb1b0647

  • SHA256

    277949430f062acfc3fa2cec61dbc138220185b9a910f5b9d37649e91f49f495

  • SHA512

    05731f4e033ba4e40cc5653100ed87a19e602cf97765c96480e955f09dc0009e8beca6efd8aabf33f3ed43b6ffc24a8f8d46ee92d3a4037e2ca3cf18e1735008

  • SSDEEP

    1536:dH7Ka3+sl95NzxKe4hmi+qmvlNfir95oRdRJroFCdIYW9Tr7c2WUpO7WK1:lTtxKDUqmvla9iRd33G5cB7H

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\804844f465dec57a5aa8fa602d339a1d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1340

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b682f39f1ceb2c69a0d17acd9f60395c

          SHA1

          3f89ad4ea0c671e26d86d986e0505bda3fa070c5

          SHA256

          927da0a9d8c62c7f58cdba503fe88685e5a79ea901cfd6f0e682dad9205bc958

          SHA512

          ee2b77ed1b6f563db535b37ff680600d655700241c8dc98b23495b20ecea200882d55fc28edaabe04012013cba2296b7ee2d4328789e51f69979da8671f1c239