Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 22:01

General

  • Target

    afd4fa489b86a236c9e497729d188cca.pdf

  • Size

    80KB

  • MD5

    afd4fa489b86a236c9e497729d188cca

  • SHA1

    57b0dfbe6927e6f266f20ec39d37ef52e0d16cf3

  • SHA256

    57df7c54eb88c6a78bfb7f0ef8b3ba9cf0a441bb4e496a1dcfebb38cdd89f984

  • SHA512

    3278d07b9a8626132385b499ba978d7e77d19f82cc38bbea0a60b6c4ddbda1ee7bc6631ede6b75378c055a710519bf0cc5f3d5fa8c3d7bc3022334379a5376a3

  • SSDEEP

    1536:vXRiRU+Nj/9TgoMqmT4j+pnx4WTSYbVITy294hU1W8pO+TxL:/R3Oj/rM14IntLbVIe294hUE+l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\afd4fa489b86a236c9e497729d188cca.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fef5642e43be34141cc652cee92da62b

    SHA1

    a03b28ede95fa8cc49841a9407c0470f5e2843f5

    SHA256

    7de08353a31ea3de20902bc23021f5649549329d9e9ca22846efe78d5802c8bc

    SHA512

    a627349f48eec5bcf0071000a0355212e1067649d087a7275e708718bc51bce1aee7a7d9d9b4b33850d7525daf5baeaa47513ab7fc03ae28e087ebe2e3d33762