Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 04:19

General

  • Target

    c7ac5e7665ac012f54765d43cbb3ac40.pdf

  • Size

    43KB

  • MD5

    c7ac5e7665ac012f54765d43cbb3ac40

  • SHA1

    7cf6456c26bb6c66c101f9de988fbf6b57c13017

  • SHA256

    e72fea1445b9ceb48a9495a1fe4835b2cafb70466be6d6844897a1ea2f899e0d

  • SHA512

    d664ba997bc8dc463472f0b16c09867c1ba61c088875b95949429617b26d0045ac555f107e4373969b6bd4c9d1e2ff23cd241e127d053dcb2a32c86c292b014b

  • SSDEEP

    768:LrdEpBNggA9BlvYTpw+5kQmqaePIdIjMF24VZcdh+UAhbyhCXtI5mkj/j/:/dEpMgKpqq+5kCa2ygkZ6+vhbyMXu5mk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c7ac5e7665ac012f54765d43cbb3ac40.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2820

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3a294553c4f7a4143c174754994cd31f

          SHA1

          cdc139382ac99251bf3dda75bb50a1dff6071d94

          SHA256

          d80265a526db94d9c22605bf5d88f0f0b2bd2dbccf96bfa96d22d8b7e8903531

          SHA512

          aac4c6723aba98a0b49d4e8ec8eb198d5e1d19d4d3dd67e60ed82a7dfb7ac34bf21984cf35724defcee1727a402227d9519d7ed53ac8f67f7c44ccb8bbbdac86