Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:31

General

  • Target

    14d7bab1012364b90275ed4892cff2f4.pdf

  • Size

    71KB

  • MD5

    14d7bab1012364b90275ed4892cff2f4

  • SHA1

    2dd1053fbabcb6b707b2a66b9e04e8d563c10481

  • SHA256

    057bcc9c3ee0b4b3c426b4fb4824a15283716fcab9dccbd5d51c81c68ec052fa

  • SHA512

    9fa440a3139fa8c3f5ec775800e93ba857ac13289692f7335c7041b35c70f0850f8eee6d705bf5cadf7eee28a3ae07d362a2dba7590b7d9cde095b5c76660d76

  • SSDEEP

    1536:CYoVvSvGtzCRMD3zL/EOQ2Xr+4UqR+Qq+BqHmdKaOLjIWkNpOPaWVJ2q3lrK6Va4:zoVqViDDLnb+1E+R+sHwKrPR2YlrN04

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14d7bab1012364b90275ed4892cff2f4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    22f8a35d810e71f1d4aa73266acb72e6

    SHA1

    e0bbda0bde21c9ae5c2c770e47d4366d99be14a4

    SHA256

    24d2e2b6311b115b56b3932156bede58327f74b269ba56f590392533ea021f1a

    SHA512

    2bb6412bd0f86982d6c28ef59dd4f571e002b48dfc02e35c710ca6fa7ed9e9b889520673aacdc24c51c7b3d395c7db2e35b2ee0d02396eeda16f21c221f9f076