Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    24/11/2023, 20:50

General

  • Target

    D680013121001202200043000A secretaría2023111765740.pdf

  • Size

    330KB

  • MD5

    cf68f3ef32d8b1bf7113e4101260121a

  • SHA1

    5e65a5fdddb06c822ffa25020ef397470eab9d37

  • SHA256

    722f2d047019a71186d0044ce80f6f1f2ad93a79da33ae885a5a7e8b16a69fc4

  • SHA512

    3629dd2e482fa23bea3a70f613ca65452f03bd873bbaf783dc19398b6b86f429920f21c50e4512a516817a4498bbf554cb1089941df4b0724cdf88eaba25c3ef

  • SSDEEP

    6144:ZBbl6CL8isf6yBrb8WL+PJrCSfcHS6DGH5V2hkbBlH6jIPfpbTFHlmK:ZVCiByFLkrfu3DYVQKBtZ5lz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\D680013121001202200043000A secretaría2023111765740.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2f8281c7d5986022eac5b712f6970f96

          SHA1

          9e7c65648b6a3cf2cc15c32877ba47365a80c1d8

          SHA256

          77b715d93f7c21365d52e625fbe51b23a0a0341f85c918d909ba81062ffe3c6b

          SHA512

          269064e0ab4e9ae2fcb40dda5aec14deafc517dd78b24155be66c94c5dc3b832e54f3ec60103f54be0de4d15e57ece828a42af796af73b55996870aac86a4a4f