Analysis

  • max time kernel
    150s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    04/08/2023, 11:49

General

  • Target

    43df8358f1518900795522adc132f9682df26f4ea0bb6c147e81e3371b179441.pdf

  • Size

    68KB

  • MD5

    241421c6b30541e51e74f4aa9e65accb

  • SHA1

    0bcea4fc28615f6c45381ef309503e5146b615ae

  • SHA256

    43df8358f1518900795522adc132f9682df26f4ea0bb6c147e81e3371b179441

  • SHA512

    c2d9dc349c05d062d998a037b9b5556a0fc1956ea93af34b95952c4b70828b29c2ea4bc5264ba1034ff6ed907436767b6b6534ed896a124f25de371aa8ecaebd

  • SSDEEP

    1536:KYjzKmuGRy6oR52PraLkY5kIBA/0vY0engK:KY3Nl/I5WmBBtFM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\43df8358f1518900795522adc132f9682df26f4ea0bb6c147e81e3371b179441.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2568

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          df5715d0e1221b9f90cdb0b01dea6e05

          SHA1

          15d39fe9544968eceb50a006f90fd5a8cde8750f

          SHA256

          8dab8bbaa02270cda0c86c5504c25f706915ee66d97275a6baa9049f68941c8a

          SHA512

          8981017ff61971f87d1d72bdee5dca71a551a59b38132ef619161dfcc5d263eb507b447f7fb8f6c14a543017f5e418860d4ee85deb1abbf5a4ad9dd8fe84e23f