Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/02/2024, 08:04

General

  • Target

    9b29254df9e3b61884016e5ffa9d735e.pdf

  • Size

    99KB

  • MD5

    9b29254df9e3b61884016e5ffa9d735e

  • SHA1

    089c99bf0b74dbabb98aab55e447d72b2f76335f

  • SHA256

    f880489a42345a76b3b480ebe22f53ed63d3ace3030263ee691ccd64c9f7f0ed

  • SHA512

    b7560b74488fb92050a137b574ac77c3b8a711c2aed11b7f001a4451944ef1cd1d582134809f8a0dc204e5c2609f294e6538f24a733bee3e88f73bbd9f5676db

  • SSDEEP

    1536:Q7IPnHcZAwR67u4JPg0RJrfUK1IDG/Fv8fVBGx1pNVZzVcnaZgP2KOuHoeVz+af:NPRwRqPxDfUYIS/WKx1zteaO24HlVzh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9b29254df9e3b61884016e5ffa9d735e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1764

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ac9a62b102cc86f55a83cb3072caac65

          SHA1

          75aecc561c094bdba53c28cba2457286b05d8969

          SHA256

          d8bc314a562a9afa78f67ff584fdcebb63db5f16dc906a33862fbfde031f0231

          SHA512

          d5e5cdfda1ba733834af147a61a3577f1e83c37d8c07dee377a42ece9eafd6d9ffb8750f7ab9bf91a026d68832af0ed2acb5d0806d78d273ca0bd435a0ec6da4