Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/02/2024, 07:12

General

  • Target

    864370709cc99d4f9b47b6def36c1097.pdf

  • Size

    87KB

  • MD5

    864370709cc99d4f9b47b6def36c1097

  • SHA1

    0b53cd1d756a98f39c5e395d481359bce294967e

  • SHA256

    49f2c7cd5618c2cc4eb3e5997c66e27934fc5dc5e9dd5ef9ea617fb4fd6385b7

  • SHA512

    3901a93a908cc54e88761803b64f4197141f962da8d2c60d9a71ac3d082c625fbdb1b44b457057d21a29a3737c643f52711fd2e55a0387f3c4b444bf0522345b

  • SSDEEP

    1536:odz7i/LXkNUMc0/6oHoOmkwPTrFDHxT/WsGGWGpOKCWBr3QlD9QI/fo:i3i/rk+M3BRwvVHBovK3QlD9QII

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\864370709cc99d4f9b47b6def36c1097.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1876

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          acd16b926b9db1091f725e98884b8849

          SHA1

          9ed58b399f709f00b44eb817aeedaa11bdafb962

          SHA256

          60819a45017caaf5d755c600cbff3c47a2086fa08bde6333c9ba8e15891e5f81

          SHA512

          c000716f132f5e478b266671a42ecc480114bf018e9326b4ab192b483b36501aff042ada2f2f9714bcbcc459af32149965b4cbbdea7f37c5372d424df64ffbb8