Analysis

  • max time kernel
    142s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 22:05

General

  • Target

    b132724de0415ad4b119d3ffe83b37c5.pdf

  • Size

    80KB

  • MD5

    b132724de0415ad4b119d3ffe83b37c5

  • SHA1

    68b4ae6f33099ee7cf8e151b6d02ae70db7b0c37

  • SHA256

    c44ffe561d25e940b562f5566e06b369b2e26de1cb390eab8976fc7c3d364410

  • SHA512

    3df7184b406cdde3a34addfe8bc4ce04c4ed90fd58aba2123bbbc3acfcc8f41609935c2f9585f49f8025f28ebf672574dea16f8e1f1671e73485cc7ab57f14a0

  • SSDEEP

    1536:nR5ozCpMu2ERx/utjuYyHzNMOWHpOvUIZ6WEnY1bz28PHiG7:5GLERxWjuVHzNMevhZKnybyGz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b132724de0415ad4b119d3ffe83b37c5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2852

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          99588edb53600a382212d0350426a75c

          SHA1

          12afb1df796dece8b00ba882262355450bdf7284

          SHA256

          393ddf2db56e502df1b3762f7008225346eea3e56d9b53d0d47bb6d5a8957ec3

          SHA512

          ba9322986234486c7b77b496ad07798644b7270ce199d170c9d313ebc0f4e2ca88f2eccdc275b291ba55d12b8a96d052957c46b92abcb86e74b32ffb60b0dbe9