Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:29

General

  • Target

    1450da431e38b1b31c14d1ac7201a570.pdf

  • Size

    88KB

  • MD5

    1450da431e38b1b31c14d1ac7201a570

  • SHA1

    ebada39c010e7ef7f4004188a9623ec1f963053b

  • SHA256

    fdbf874853ca8e7bb549d917cae302e8d1223a4477e56b9485bee3a10dfb5f06

  • SHA512

    59f5ce76ec2d1f730335faf3d6e00180b4a50d87f0f3bc9a7c0fa789c1efea73262c0d71abc46c85736ae3c84f95be837742fabf513e34bebecef03029041812

  • SSDEEP

    1536:bsz1laREpjDBRiYu77usUrKs8qwowHRvT+DUwrOKxp+HuIdZWbpONyOlOGWdxoil:U1laRoD+77usUFw1xvKUwrOKr+HdbNE5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1450da431e38b1b31c14d1ac7201a570.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2100

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8e698cf2ed9a610dc786038b77048de4

          SHA1

          1ea9dfb60c2bac463f8ce4c020775eb2114d9fa5

          SHA256

          81445ff975e2bc303ae0581a8117a8c56d06d8ff95c27fdb88b77869ef1af6fd

          SHA512

          03fbe2c9684dda2e671d35ead158822a780c436d6125fa3137700930f5f698eac6936d9c3b9a14a30a86ba99d83d8b9aad5fdaad1b65f50b1de5c203c21add2a