Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 11:32

General

  • Target

    14e49d7e3712b4faa4c2beb1043c3541.pdf

  • Size

    94KB

  • MD5

    14e49d7e3712b4faa4c2beb1043c3541

  • SHA1

    a9e2e5d2b3ada7d33800876be026974152ca2871

  • SHA256

    e5d42e6ba93a2b1374830b65ca7ec665adab9d66ada7609ef60cdc5e2fe383a0

  • SHA512

    e330a54ab03781dcd2d55fe30d9c9f412e72372bd10a06f6a321b5f58e1afba21c2020495cd70212e4b38b21e5d0740808a21c5ba7c42c16124bbf941babd56c

  • SSDEEP

    1536:FTVon5D2Zi6InyKDDCoet7Hgby4wU1uXBAKGMVwtj384vZK0ODWQccF+ciWapOtA:bo5Ui6oDDzCdAsBzVUHvZKRxF+c/tQ6s

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14e49d7e3712b4faa4c2beb1043c3541.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    45bd85210d23e6e9364381c20c131a82

    SHA1

    95783b4163d5549ce45022b74c1bb1747dd8e86f

    SHA256

    fc82ac6ac729f1ba8486acf37038241e4e2f4f7b6152b12bf7c8df475e502825

    SHA512

    d93a361519f16b69acf263c397b37fa1f136b6972ca23d96837a69aaf7c4227bbb333a04601bf08f1fbf510719b4963cd426da08bed3010e65ae91b38f36b3b1