Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:16

General

  • Target

    120df601c29b5543df3aae31adf8b017.pdf

  • Size

    79KB

  • MD5

    120df601c29b5543df3aae31adf8b017

  • SHA1

    83cf1c6589ae5a6f58ab1ed4855a6526fbaee45f

  • SHA256

    8366230acd8c7b9d23513f1e6d316edad742f6799715b8ed1c42a91436bf17a5

  • SHA512

    d43e640bfc11189c361a730bd184065e36c0fd62c92296ce3810219101a55c72eb7cc4782f707633000dbc16edf3579f4dcd6e67b2af6912391c81099e44f33a

  • SSDEEP

    1536:gQ9zqeHGJ+dfXR0Xj39Tu42Ja4/ruEJNWPevHW+RWspO2Ku+lnEd:LXmId6Xz442JaSiKHPA2Ku0q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\120df601c29b5543df3aae31adf8b017.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2456

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fe892ec08d11ba670cd7337f4e1955a1

          SHA1

          4c63e0236f7a1caade6350b0c24c6184f32cbf41

          SHA256

          ccd41fc925e27b1e1a4f2d0f60517e6377997c81f75734dd783f8f4a3037b3eb

          SHA512

          b111d546a67e2027eef20165f6b9e95887ad4d64f54fff5b959727d7c5c9c63a8d8dafc6a4c7b07d681c76c814f3e87f078bf797e9c7cf2360c1d45258a9e23a