Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 12:21

General

  • Target

    1fb7746d0411993853ec2b87e6df4572.pdf

  • Size

    89KB

  • MD5

    1fb7746d0411993853ec2b87e6df4572

  • SHA1

    f839e9a657669428b753670a9862b788d87f3a3f

  • SHA256

    981bb2c9fd2354063c9fba7272634a27af4c36aebb69b1d0b00cb866f4ff855e

  • SHA512

    b9b75c6731ccab5d08d9b774ee73e3ab1798f3722d21d26fb15b6296ea49a7000c4453276b86a8880e71417badb3794ebd7d927c8529703b10ef2b0e69111211

  • SSDEEP

    1536:wSeB/LsFX6ZcAjnS1QX98L938SXpsE2O6goZ6cjvKrjptWPT6sm191N2WApO6g6o:KhLsZbAjSyXmB38SXpsE8goMUYjp6Pmv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1fb7746d0411993853ec2b87e6df4572.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1dd82ded8dc6557c06347c5683ab19c8

    SHA1

    fa4990009f85510dde2275693ddb88b353581a7c

    SHA256

    2d95506d74cfc079cf1228b47277f54c88ace47ed25a5af4ef8d1dd17b10c907

    SHA512

    97c2f061696c4bee2c3a15c634c1888182b04d3341c0d26464a30088f0c91540b65e7e2cc41a65cf9336855fc0751f404846c34926432aa9185e6bc941378547