Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/02/2024, 04:43

General

  • Target

    988078dd82ef567b13f4e7e2b5e60378.pdf

  • Size

    72KB

  • MD5

    988078dd82ef567b13f4e7e2b5e60378

  • SHA1

    92c52e2cf54d23eb3e571d3a58083734030b9244

  • SHA256

    70c6d2f8bcf654a1132490240c80651b417b5836c1fee06aaf9c8851b4acd3a5

  • SHA512

    6677b7893e3eb04c27fde45be75a7eb6687ff8722bdc7c3f29b4075e3c4cbfa4015959235e418df5552d1ae23027aa3aea69f97f8d0a2c74db77e235fd3b0002

  • SSDEEP

    1536:LdJ5ijpRTuZvv2cN/DP/a2U7zxrHmqcygUI3Td6YjIxbMDPQnz02b9YnnMrRBx:uTmv2c1Da2U7zt057Ixo0nzFJHr1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\988078dd82ef567b13f4e7e2b5e60378.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8d0875d993997af0cff50f2fa9dc5094

          SHA1

          c3a726b7d85d90f45aee4de16321920980de4cb4

          SHA256

          34a3d582de53b61d43abbdf876e2d66c4f989bac78cc0c118a1fb2df5264c3ba

          SHA512

          b708860531f49fbaafec1cbbbfdcbd1cbb5fd712b4c3b483cc4eb2eb408fc7d75e6c7693b039ba6e38a28707be4e671c2147504ae8df36fe9b450ddbf6adedd0