Analysis

  • max time kernel
    117s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:19

General

  • Target

    12b2f0a1cc0a1f800663d9ba0a2388eb.pdf

  • Size

    91KB

  • MD5

    12b2f0a1cc0a1f800663d9ba0a2388eb

  • SHA1

    72ba4151fb7c02cad11190c7e4fe834b4384f928

  • SHA256

    d61e95dc088365656b611f657cc535394dcb7455f58800d2f0856ec429ecea25

  • SHA512

    f67d70a24c6b3bd00cff7a569282dc7401c013b0457f20c2d6fc80176caa82efe2aeaab15248b04f3088f71d0abd7616a4204be7ac0e5e9f1023a3ae4efc500f

  • SSDEEP

    1536:Sj6BSfc/rajAAfdrL/ktp1oIVaov4IdtsOUKdzGYgmymG6nflHTWEOWpfEharWcn:tBsc/mfJKqIVao9MeNLNHNdqm5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12b2f0a1cc0a1f800663d9ba0a2388eb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2104

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          52dabf87ea2178c7532d4fb801b14bd4

          SHA1

          1ccecafc7a06f66a94b99c3a1ff80d8aa76c923d

          SHA256

          62dd821f0401f91c36a39bee11c0c66d6ecb443cb052c545cb17798628547024

          SHA512

          06441465247cb07060bc29501f7d96b867958d42441a52f979a9e6c06ac5622ae900e5f887c90e300cbc44fe890ae542fbabe2d1315f3e8424987cce3ff4409e