Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 11:38

General

  • Target

    9710c93a7e24309ba9f6625d612e7bed.pdf

  • Size

    92KB

  • MD5

    9710c93a7e24309ba9f6625d612e7bed

  • SHA1

    da769423afd376c5edf208a0b2dbdff30baccdc4

  • SHA256

    c8b46715be02976bc4670910874fb8705b1df6b66ecea035dff914b0649de7f6

  • SHA512

    f0f224972b594f77c9578b45b9c55846055cf9c6a7fd65f309fc034ba1f123a6e6aef30e0a0cc7263e6b17565df5fb41b018f8a75d80d6b8c7230d66ec518af0

  • SSDEEP

    1536:Tp3NvGssNE/WpOGolXvDF8LlkI0vdzLTH55m3HZGrJ7VTFd6MAXwsktHh9F6FRvz:ts58WExvh8LiI0lPTH5sAqzHHZti+Cmp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9710c93a7e24309ba9f6625d612e7bed.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ee95b50d8e14f80bedece091b6398652

    SHA1

    8cc056926526dd459ddb84ddd96ec62681827221

    SHA256

    4efec0c7fbb7440d9000c9c1856f918e878abb68ac55371bea55e0c9b789a488

    SHA512

    8fa8d0445c5d6b414e23799cf1aacf156e2d59f05a902b1fd9e21c87e5779180b30c35e084c27ea9dc7047a9e4439f6f2658503b67dea3cf49724bf87812a3f6