Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:38

General

  • Target

    15fd9e05d5965e0db38f62fcdee0f61a.pdf

  • Size

    83KB

  • MD5

    15fd9e05d5965e0db38f62fcdee0f61a

  • SHA1

    ade39332f7b3265c3397da16d439032841d7386c

  • SHA256

    62f91486996b4c66e8d4a725a85ef7366ceaf308fa296748d2c01015b7dd0ad4

  • SHA512

    1270e640aa5729cd2b91a66465a1f0d5771cfd5977a4163a8bc0b7c9eb01f9a8ab2e67686187d8d5eb563398891b191dc3b5395481f92c9ac2a2b33d2f6aead3

  • SSDEEP

    1536:ft2/W75UInzBWOhTDWdA9xb7UhGa41AucwHySFMTLtWoS3fGMG8z2/W6pOu2omcw:bBn95hPBxb7UhGt+ucwSSFMPrVMp2UuI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\15fd9e05d5965e0db38f62fcdee0f61a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b49a9a002cde5ae5196d1c1656366f7a

    SHA1

    c5b2e628d9f50eebd4ba6973ec50bacb86deeda0

    SHA256

    3a556b82133d704ea1587348eef98a5ff08a4f9a3c68a274df51492120930100

    SHA512

    96db899d65c274c0de8ea6d19ff9bbda8d3005dc17e9972c133e989f9f8f494b8a5311e118cb30d05aa892c277a320277486bbf6a69e73c3b13b3f7449ab0479