Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:14

General

  • Target

    118acfdadaaa51bdab3fab5474052454.pdf

  • Size

    81KB

  • MD5

    118acfdadaaa51bdab3fab5474052454

  • SHA1

    67a847ebf318cd177902d1de59cd6970af457d83

  • SHA256

    3e022027d4c4f1460675ae1994fe49b06ecffcf7b1b6fc810034b72d8edd5811

  • SHA512

    b02c7e50b3aa0f6121c325d2d95303751827ba7d96e0458b3d9ae8ab30f79e773debe5fa2ed6e40aea2f3616d25243db475dbf3f32ddf3cda112e5a380b40920

  • SSDEEP

    1536:GkzDT24liyhaCGFvGStv0sGuwoMyXYZQOmI9LhWM5xGBupW5qLhWwpOSaED/:bze4TsCuv3vsuwRIGgIXbTpW5qL4SX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\118acfdadaaa51bdab3fab5474052454.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2336

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4634acf5b5a2fa0dcb5c9a5d405ca5b9

          SHA1

          7175d08cbad117ce0293613bc13028300daf67b1

          SHA256

          1756848f3690efd3329b99adbe711ea9043198c0d7b27fdae21c0e8483e0da70

          SHA512

          30ca4c6d550941eeba149f858029c75dcb45d7e9112ef3f96702aa19b7f995d84f632bb918dcb1ccc35869833aa281f7bd03e3b84bc839330b8bbda38e670b86