Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 11:23

General

  • Target

    134b7305659f8569cffd6aee6e6fce52.pdf

  • Size

    81KB

  • MD5

    134b7305659f8569cffd6aee6e6fce52

  • SHA1

    8e9c93944fad016f2d894a41bad2cc092b84fe9d

  • SHA256

    144b78537dc5cdc90dad75807d3e67589344ae7663f7cb29fda834bee08adc73

  • SHA512

    d073efd63611302aa2db9bec0e56f6ed1ee33986d279050df76e24bc7d885dc7343f61313b911c1bc7c9ebccdc02afc2521f4a41501bc1daa17a186df7c8a47c

  • SSDEEP

    1536:WASkhtzAKFlPCO/j1ml1NXRxJGzmXEha/nbUbVPgqJZWbpONiWGoyRDYpELF/:ikhtzAKFjhmH5JGyEmIbVYqJbN8oyRp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\134b7305659f8569cffd6aee6e6fce52.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4db181e0743463c11f4fb9394e1bfa56

    SHA1

    a5a8593717172e77fc24188c77c2703d0be3c1a4

    SHA256

    05d15232ba87ff68a00485f1b1a307b187899a04420b186fd1e046ee13f0783c

    SHA512

    d7d0da52d68d1c037c4775e37f27a3bd97f1a222a07d18858dde563786b50d443a4461da2ccbcd466f22feb5f1f7e07505c5bb37e1e521c08194e76f88111be3