Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:16

General

  • Target

    12125d734cc5eb1be6b6116b790a7700.pdf

  • Size

    79KB

  • MD5

    12125d734cc5eb1be6b6116b790a7700

  • SHA1

    aeb55557fd1d0674a743e8fbd85957ad953b27d5

  • SHA256

    2e335da07f23a929752b9997bb742ac087267d29306325a8824cf41a16199c56

  • SHA512

    5ba89ddd4b33909f56c1b0c7420f633ad333ba74866d0a8586c276b822dddd22b34ac960f11163f84bceb633aa903158a97f05e791f256bdbc50cf9d41eb9cf7

  • SSDEEP

    1536:VBVnrD5A9gQg30Vr1pv7QDlbHc+cEe4JtjMNiWapOtQHWyOLoDQqAYgl:p35ite0VpZiR8HAIN/tQjOLoUqAl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12125d734cc5eb1be6b6116b790a7700.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1440

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          dbb749018b0b3f4e2881d8844f607474

          SHA1

          02a798b39cfc8e5e9f50b61f0bed6f64093d5b54

          SHA256

          c7fea4fc8491110bc9e4bdfaed380805443949e0e1392019f5e0211bfd96b6cb

          SHA512

          4f20e46ddeb4f9b5801137b4d8cfe7e227f161598ceffb242094a6039fe9239a3305bfc92c4019d8141d2555d19710a16c640debed92e9d49abf34bfd7f456e2