Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:15

General

  • Target

    11d21b795324caca1422200ef1b7d861.pdf

  • Size

    71KB

  • MD5

    11d21b795324caca1422200ef1b7d861

  • SHA1

    e5bf6781e82ecc060aea2a38435cb6f317ccc1d7

  • SHA256

    467fd891a20213d7f15cfdfe0943e97698869a6d5bfbaf74692ad598100b484e

  • SHA512

    42e8752ef671801d565c505df061ced395c189340c8d79fe98fbcc7f32adf9546babe7a2bab16f0f9c579d200be4dfcb0e88564540bc1f51cbc00103b210b749

  • SSDEEP

    1536:HA+OMSMkxppbqxtwDISq5Yw/KkebOgsWt5I9CsKZWbpONiW5GI7sm43yn:xOHMkxzwwDISqyTO9oI9CsKbNqI4e

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11d21b795324caca1422200ef1b7d861.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2416

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e9b1e219766161033ab79f9bbb67dc3a

          SHA1

          7d85f540abfb7a63c00fb930d3119e55623f24e7

          SHA256

          f55326239f5c96c5bf980902645d420ee321627da238680ef3fbef71e17f0908

          SHA512

          cfd8c325c2272a75f0de70121db5d750e59b2c8191727035f9fac2e931d641e67fc614a22abc4d3c964b8e4df08273e934fbe518f6f7d96d612088ba3600386c