Analysis

  • max time kernel
    151s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    16/08/2023, 18:52

General

  • Target

    42d996f3ea94b33eee4212a2d8c48aafc5f7023fc48f9f54dcd20e41671a85cc.pdf

  • Size

    157KB

  • MD5

    0ca1cf2f219f75984fb71b8b4f62e5a5

  • SHA1

    9656ca9788471c4bb7ba52ceb63d2de06d2c93e7

  • SHA256

    42d996f3ea94b33eee4212a2d8c48aafc5f7023fc48f9f54dcd20e41671a85cc

  • SHA512

    383f6704d11fd0336d3e022da965838966ef2e05398ee91abb62f7cd0c7d29086c13c749a71fd3f3c53514942227ff7b52a305cea0345204c7346f2f7441b754

  • SSDEEP

    3072:OlAlDE31pFPiaSFqp/L4vrEGcFqydIxVMciEb5aA/y816Gf9amkWFWIXcq:vQwqp/svrEG1xVzZ5v/yE6y+w9X/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\42d996f3ea94b33eee4212a2d8c48aafc5f7023fc48f9f54dcd20e41671a85cc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2432

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ccd119c1c064c55992bd26b3c538a2c6

          SHA1

          4a0c9b3e39f271a9c50e868c92ef87751efe24e8

          SHA256

          30952c9b11ce6f83cf050179bd04371d7d24ce31b96bce701308cee6fd76676e

          SHA512

          c94a57878841a0de7fddf5a3757f6ea53318da339cd8781a007f2a542c692fdb953db40f078437659c24eee52a6e028cbd7c1838ea1c8b9869d53bf8ec8b7a95