Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    16-11-2023 05:23

General

  • Target

    GMY-17258_0000719919_01_Certificado.pdf

  • Size

    538KB

  • MD5

    7e39532b49833835081860d181640f77

  • SHA1

    33090bb7b42503d24b406526d00e06b8aa65675f

  • SHA256

    e28a0dc7821b909474eebbaf4b0c27d886bec3c7e967b12b0a0574967e5acfda

  • SHA512

    1686ca9401cc86093196ba4dab088f1b0d4888083b4c9adcaf1546dba65cd1f10b695ca7da21a6fb4120771c504624b38dd16df52cc3f32fb9efa295f00f2524

  • SSDEEP

    12288:zWjaYNjRCpAiPo/yZE1Bsi1X7GTtzoVgMHaOJ2scJ/nB9Fi840Xmq:qGq+RoqZE91Xqt+aOYscJ/nBlgq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\GMY-17258_0000719919_01_Certificado.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    41a98be9f7c9abf41dfc5546b408dc68

    SHA1

    1ef71377d9220a837bbbf7d88c226495a3406bea

    SHA256

    feffd66d67b364762ccd32608ccdb3ffd58b2ba5fb0308244a3a9b335e38730f

    SHA512

    c6bc9ff80567ce0812f9e4a03e987bea0136f7940feaff8dcf395201ec7bae5073c3a3e8715440657aae0414f14ec76572878efaf379944f673759eb63f96122