Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 11:28

General

  • Target

    970b8cad2314bb27d1caa4cb7b677e58.pdf

  • Size

    76KB

  • MD5

    970b8cad2314bb27d1caa4cb7b677e58

  • SHA1

    c16f7853d9e4ac95de8a726b03111b87a4d0a3f4

  • SHA256

    84b20db3c8475c07aba7c016a45b0c04a38480fc1c04abea30a11b1a056e4b7f

  • SHA512

    bd01ba84ebb6917c9991b9254f22221ec7789cb2499f29b84818656c0b20077fe65aa57b0cad8b7b7865c4b4800ea24b220a29bbd22bdd1fd212264efd18aa7a

  • SSDEEP

    1536:8AGfrK3m2kAoTmL+YneBmrMSs+GH5JtqB0+AuQNStvd3+hUhcCGWnpO36VIY+Wlr:mzXXTmL+YToSs+qG0fu1o9Cm36VIYbk8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\970b8cad2314bb27d1caa4cb7b677e58.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    887c29a832408626651c44a659c8b104

    SHA1

    7c2b0a2ec9fde1ff89e678963e2daba4814e9346

    SHA256

    3e0a4158c0f01b45ebdbf952306dfa09c5b4b02292f83afd0809d3b39378fa35

    SHA512

    7f13a3d315803f4f251a9d34b55df620a86abd9cc2b83431ffd951fe4030b3d0931e3c955951e68153c0e39f1e167792c9d7dce5e511449e43c4a2fa71313433