Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/02/2024, 12:18

General

  • Target

    9ba700e582b1957114dd5cb00f6cb662.pdf

  • Size

    103KB

  • MD5

    9ba700e582b1957114dd5cb00f6cb662

  • SHA1

    65aeaed5435281587ab5654b756e13cdc813e011

  • SHA256

    c41d75cc58ce553e368dfd2ba16f55889403508d3cdb84af101e17cfd472e634

  • SHA512

    589c6491ce5fc68d28c131a05ce4d038c3e0bfda12350dac27d655232fcfc53192c77a57b4e9e3bc4e8983f91d074082f0fd5c19e00ff6cbdf09ece26a860a32

  • SSDEEP

    1536:yVphEf1kCGBRvUf3jhUeyaJcoIoIKIfkmnHYkTKiw1dJz8UVwLNjWkNpOPE3eiXj:IEtk/7M3jhUeo4Ijf+3JzgNUPyeiUjOd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9ba700e582b1957114dd5cb00f6cb662.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2424

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          22a7f7cffbc068d2ecc7fb6403f56398

          SHA1

          9698b151b498b22934c55ce5a0c98cdb9b8c7b3c

          SHA256

          d7f050ab8a34bdc823fae37a499bf120225b4170c4d97fd3d068a3ac0cb4911b

          SHA512

          b53d59a87087eea299e3d4c75aab76783f3b2f8f491b7131ec75be50caa46998647ad2fe8f98d0d9775971a0bbb4174c90db7cd8fc0aa47e10dcf905dcb3f34f