Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 12:21

General

  • Target

    1fc9617cb26be562dbd30cff3bfca1fc.pdf

  • Size

    73KB

  • MD5

    1fc9617cb26be562dbd30cff3bfca1fc

  • SHA1

    7eb37264788e6b49b657b5f354655c089ddf6142

  • SHA256

    9edd1278ef2549c9a0c3d1c4e9699d956b7a662841139167c3eaf6db4c7cb1f3

  • SHA512

    3a7fbfd9efe0229dc90ad757f130b086a2950f696f8dc4526fa75737f025ef0da984ebda906715eddbe2dd404c42af4de3e77d67fb0a970c567416feb9df5631

  • SSDEEP

    1536:0BENCJth76IABxF+zLkMc5cYUdpx2ShMRW8p1ugiWVdWApO6eJ9z:JCJX76IsxFAk/5lupx2aM/p1ugNU6k

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1fc9617cb26be562dbd30cff3bfca1fc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1404

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          dd1fbeed657e723031130cb10cd01ed4

          SHA1

          cb437d4aeeed9b1b1e83d5cdf3ed8782fe48eaf2

          SHA256

          76f0bae387a5751f4fa5b97a3127063fdd8aeedcfe0d96e72ec47be6f2d0a5c7

          SHA512

          22c9609e3b150d1602cc1b09d038690fd11de25228711c41451d088134fe33d5fa6d47fdca3d02c50b16d9ce79a58cd0617f178f9687d62ee941fb5d8b6597e8