Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 11:27

General

  • Target

    13e8501c9504152819df64349dc2e706.pdf

  • Size

    78KB

  • MD5

    13e8501c9504152819df64349dc2e706

  • SHA1

    17d1d6aab43c8edcbb6a381f7f5fdda1c42a40ca

  • SHA256

    4e067d5848b26cf753ebc05e8d6b1076dbddf102f5c45100176bd9c4173e5440

  • SHA512

    4a158af6c2c0d71257081c112b3dcc034af13336f5c259c3ba8e8966aa83864e9ac97d0d09a50ec1bdea50aaad8c777641ea3edda3941d0ca268a57afc4bd5cf

  • SSDEEP

    1536:F3OC/l2pMeMnJTTYXNAfN1Yej2iH4eWCpOViIWCSOfgdTbO5qKwtc1kmp:FOOlaeKyF+SJYzVibugpS5qlc1f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\13e8501c9504152819df64349dc2e706.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    29a08dfc156476a9675edc6f84d8d084

    SHA1

    bbf25b15cc2ed50fd45df65d8acc4fa25425afaf

    SHA256

    b2b96f092831663b341a53faf62b964c75d80c68ec5c09ef6d4165a98e6b466d

    SHA512

    80286c89b28da2125e19b14e6a6edbb3d3b74938efae69c2c293d83bf91b579122236a1fa0d5f6a4338bb7fe0667799fd06cd5ae591144e07349c8be8bbb68c3