Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 22:05

General

  • Target

    b14db6316c0bd07d867544ee378e01b1.pdf

  • Size

    86KB

  • MD5

    b14db6316c0bd07d867544ee378e01b1

  • SHA1

    42d376e8f83733f4193dea6cfaf8b84466633f2d

  • SHA256

    4d25897ac1daf8cab1b9d614eafcdef19b221413b48ac8b3cfc823408b000d9a

  • SHA512

    0cc54773cc751fa220904a777d5f02e612969491f38f562a1955b26c0f40d77a905d4dafc6224aa536aec34ee0e2d136724923a2e709248305f6f0141df52713

  • SSDEEP

    1536:MGOFcNXgbxEHuwbVubqygDiABIMYRRZCZGa7Lnm8RBXt0ISo6WUOHL3HWapOnubz:1LNXexEjQeHBQZCZG21XmIjQnQz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b14db6316c0bd07d867544ee378e01b1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0885185ec25810b14ce1680c316c9b38

    SHA1

    3ddfc34711ca15fe94c51fdbdc5e9691d616446a

    SHA256

    3f475ae1270123d6bc2f295d8c92f9afa8f69631c88a2fb339ce3caa562dd5d3

    SHA512

    d419e98fe9fbd4e8e0f3357b62ea79056f623d317b17ea6284e18ae53133bdd35a418cd2bd42b2f46eabfef8d7de5afe6f85764c193df1c3acf6913e95699da0