Analysis

  • max time kernel
    122s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 13:16

General

  • Target

    3009d68c9a55e268754a2304b2306d3b.pdf

  • Size

    82KB

  • MD5

    3009d68c9a55e268754a2304b2306d3b

  • SHA1

    66f4886748f83d218a96225668a70fe39694e0ef

  • SHA256

    f1cf653fed705f83a9c2be158b827b032de801a3f2148acdc1bab7a039b252a5

  • SHA512

    c7d6b3fcaa395ea35fc2bd1b0a9ed8ccb4f767e1e96eeeb27eedebb36fef59b78ec9569d80821426eae163179d5f30b68fcb38e266184e95881d3624eb8a44a1

  • SSDEEP

    1536:okG0W0JwA69+pWKyA/6JghxdIw5Avg5e4FCjWlNUpdugERW8pO7d7r:g0V88WRghxVAY5e4FCmN3gEI7B

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3009d68c9a55e268754a2304b2306d3b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a37fbfb1de37e0f809370a0ab53c1c77

    SHA1

    e92be93f0e1d36a701f6dbc6ec2c8a0aecfd3097

    SHA256

    cd5731d2897fdd19fe68d34dc179aba97226c2bb4fa0bc35932cdce9e58124b2

    SHA512

    0b6b42f470ab5695c782cd7be5c4624ea92892be059ebe9dfe0fb93eedda527f334745d87d71cce6afa8bfec6b3f8af853a4cb65a95abaf5a74e62e110ce582d