Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14-02-2024 02:04

General

  • Target

    9a7c539f5d78f5317c932bb4a64f12dd.pdf

  • Size

    151KB

  • MD5

    9a7c539f5d78f5317c932bb4a64f12dd

  • SHA1

    0eed05b712bbf9f723e11e5d9d2d913296529385

  • SHA256

    460ccf739a7defe281e3075a82a830a6c5f18cbf548dbc611a5037139e57b83a

  • SHA512

    d1962e4a76e2ee3ebe95c924d78a2febee2ba608513c345568a1600bdd065ce20f5263398dc716ef837f99256b8f6b3c980b1c507be2baf3869830d351ef48cb

  • SSDEEP

    3072:H2ss+SG9n6qTCeRUGS4gJH0CKMzvLyWYsJnceOWhsn59nU:H2sOGgHeRUGhaH02zvLyWYsJncY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9a7c539f5d78f5317c932bb4a64f12dd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ec779d93702e5fd23ed347123d9b687e

    SHA1

    6e941092a942e4cbe23bff94408f5dd49a31d5c7

    SHA256

    0664f92bf3bb3f74e38a7c2dfc6aaf8495a6b741758308f7ad67459d3ecc4602

    SHA512

    89b35d4a768616a5e9f5aa5b72a8e3a36ca9ea5b99b5d41a856b5c71082182d1ce2fab301d46ed342dba77da0a2a1ec0150a87f538d26f9038f45f8051a6d487