Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:16

General

  • Target

    11f33bc2663f1eb2db514952d251b343.pdf

  • Size

    79KB

  • MD5

    11f33bc2663f1eb2db514952d251b343

  • SHA1

    5cd73a053c9f15821e88a3aede42e83b158454ed

  • SHA256

    9bd23363d2a653cc94e300a4d1c1333f40ff35b7ac9020f8a4fa598572ed425b

  • SHA512

    4b67b0ef8858f4f777251c1326a683fa9dc2fe515148a37805883efbd91420c0d17cf8e4df3d5d4787f4b4b32cb3085483d145632490901ed19e4605ca8fef4c

  • SSDEEP

    1536:muiT3ttXawRd9LpzU6EotRJEOOEmjtF/m3+4NvrjF6+55t+SMll7Ep143NIbs1uj:adtXawRPpzDRuBEmZF/O+8d63YP2UJxz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11f33bc2663f1eb2db514952d251b343.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2660

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6d60adfc9d29e84764342cd45b09c9e5

          SHA1

          f5fa98c9da97d7c63990d6556a5911f8c0cef4d3

          SHA256

          98adf18219b6133c06869d693310a98f6e5efb8441179ed2b113ba91c8d5cbac

          SHA512

          53db7abfe2a80a9cf9948aba89298fa25d94ad4924da133b1d767c2ccd8ad41d1e4510de8021a3575a4c19fcae25649f4633b9c7be01db6744e81a0634ce0976