Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:25

General

  • Target

    138aeed277ae10aa1773ebafd03f8209.pdf

  • Size

    88KB

  • MD5

    138aeed277ae10aa1773ebafd03f8209

  • SHA1

    341f9c29dc342736b5d2d50872bfdfa308f3515d

  • SHA256

    2054b700c3a715aed432dbcd1cc8720de17f5312713491724a675fbccc306308

  • SHA512

    08f40e6f90088ed33f12b210bf0d5fbdcc2d9bee4857ed501013e84444253d00df4f8df6aee6b9cf6ac1f969adc0a897888219812e4cb3fce2315a0b56b636b2

  • SSDEEP

    1536:odjjPv+N/kDAer965acgRY2sdVtlyBC5Bb71RnX1uPgWwpOSqvDcTuWnN9PkCx:O3v4cDAI5cuY2sdVt0CjbvnX1uPvSqaN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\138aeed277ae10aa1773ebafd03f8209.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2096

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c323db5048a0e05a0a6c273bef3e413b

          SHA1

          c0f41b1d2245566fd86f36a286dd86aeb8c31947

          SHA256

          23a1488304cf7a036dc18de3d0a2c9c80794d07b78195301b41d87d23d336bc7

          SHA512

          39ac02af8eefbe939e392a64fd924a9cf7095afd49cf2c73e70827ee69e558ca50f38c9a8af88a2184deeb4b0b105000df3feba3f988784f967b33a04eba9cfc