Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 11:35

General

  • Target

    156d5e9a46893f4e334b87290da7a0c8.pdf

  • Size

    70KB

  • MD5

    156d5e9a46893f4e334b87290da7a0c8

  • SHA1

    bd0f242f0df5bf4280950477a82acd9a8a0335aa

  • SHA256

    763ad71f13c6cfb939a9384d54732b2f40a52927f4b2c09ac0a23c4bc5e6e0be

  • SHA512

    758ce8852f882d4f70a4ddf4cb91c7b498c7da5b9f9fe8b32d64360f4eae038cdec44509365af984b3f658ce494ad291983d5466e052d89f2448b0690d782404

  • SSDEEP

    1536:eP8aVrXBjmT0nZI0+ioZdsAZMvOKgNW8tGABAsO3gQ2+RzWQpOC5rzQ:kVrxjmT0nmZiEZMmZsAeT332+ReCa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\156d5e9a46893f4e334b87290da7a0c8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    acd3d505d7511d7873f2c6022c557389

    SHA1

    c663faa82555ee88c85bdb6dbef23df7ca46e87a

    SHA256

    f5fdd98d7b35be36137cdb056691246a0b421119f7bf31e383728ca0cb2df966

    SHA512

    73211aa6d08b1ac86b455bef7a8cf086be2410829be54ff551bfb7287a6bc417c8cfb6e460bcf305cd3ba38c43eae54cce93ce074d441ae2b3134a60a8726904