Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 12:30

General

  • Target

    22c86bd3f95d5c6c9a8ff518784ce78a.pdf

  • Size

    80KB

  • MD5

    22c86bd3f95d5c6c9a8ff518784ce78a

  • SHA1

    553ec2c61727b210d884374d94a0f02067738a47

  • SHA256

    de074120bcd18a0a3af5688b6589ea54e52717bf1fea82281e502f0bba756019

  • SHA512

    686013f7e7599e2a6d74ad5715d7f77eb563248fe039787ddfa33f63f41af9003f757df66026d08c103cdc36f09ca04b28f3efbf7d520434b3dca907f785b228

  • SSDEEP

    1536:P6LDBL1U2BOVzUVVg3p3iIDVh97haPvXrthPmv8WWjC/hpfsq:SLNumOqVW5VJhSv7tkv85C/hpB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\22c86bd3f95d5c6c9a8ff518784ce78a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    252b6a5258c39c5f40685d0437f329c9

    SHA1

    5eabf1503717c52af1a4263def30f687a7229ecd

    SHA256

    abb1fdc32825e7ef839c75b73ed3d7bdbaca6ccb8ff7ddbd9ce90d16d2daf5d6

    SHA512

    4b72b494b8c45c9899d67471aa9aa7ef639bc11ada8d9742fb25e6eaa4414b06c91b08a5e77df9f3686114d62d0e92d598a681320b2ca8ca5d6ce5df31b60e0e