Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-01-2024 16:18

General

  • Target

    804a2edeebd864b6ca1ce446dd873b7f.pdf

  • Size

    80KB

  • MD5

    804a2edeebd864b6ca1ce446dd873b7f

  • SHA1

    680817f9f4409ab42339dc9697715e880a1a7ba8

  • SHA256

    0a3f0774328b96cc94d408f10852b9cfd250c64728998e554e294e50209047cc

  • SHA512

    7d294bf86f2ff5be24c9923b189cc38d8690ae0b14fa4a0a6f8b698c260c61af99e816eb6273e6dc42a93780bd9c04e7d965a949db1af3651b243d01c3250ecf

  • SSDEEP

    1536:TKMLCjBhqrRQFyvqXNOhXUWcFGwd94QoS60+tKWQ5DqiuAOEWQpOCuVe:OBorynEcFHdsntSUiuAODCr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\804a2edeebd864b6ca1ce446dd873b7f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    55c9fdae2b72a8847f945fd82f6d4d0f

    SHA1

    58eb2851940247a99e4bb80c5e23ba2a5f290f71

    SHA256

    175299f24119f893cb5bca27956306205b4f7c48d2d298f657692eef7e04bbde

    SHA512

    f4c04aaed37bc025c6b9116e9f09fff66c52f4fde0646b6c52f5651b02459bc3a69992702cfa747123e2d6b38af6acf3baef7d25667144345136ae30e98e5f84