Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:50

General

  • Target

    182286f08b91a8e3b41763c66602545b.pdf

  • Size

    79KB

  • MD5

    182286f08b91a8e3b41763c66602545b

  • SHA1

    38b70f1da7dc4642dcd62c62931eddee3c46ccc9

  • SHA256

    c846af9267a46c4c34e6748a5b6770b6678f0b594dbc6483b25692d46ab4b2e7

  • SHA512

    0d1e5b1fa3a6389c67fd559054d3da927fb58897ba6e73cc73a166f82f1a87a49a68ae659dd63c6d8a0ea0597affb57adf2a8a30cd049783dc2a0a31dacaa0f7

  • SSDEEP

    1536:TSVYiV1NroBCNstJc82tI03FGDQ58XEMArJBtchg3H9T7k17Uh+j8Vu:Oy6iCa/c8z03KQ5m/A+hc9s1zt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\182286f08b91a8e3b41763c66602545b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    87f7ceaf02fc13363207a9699f2a36f9

    SHA1

    5be75d52abf4773d41b9a95942e98c3ea9e8ddac

    SHA256

    a0175295a20d0e8b3d99d545d86a0a9f2321edf6e81b5cbdd613fdd4fb49f6fe

    SHA512

    23ccd8f929aec1dddda0e60d1bd3fc2eaa53af51a071b6781536e9ee794b85ec6b28128acf6ee67a56961f9ebecd8cb16914868736f4e8685894ac2197b2ae2b