Analysis

  • max time kernel
    122s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 13:27

General

  • Target

    32f178f18d31cb370550fa92914a65b9.pdf

  • Size

    82KB

  • MD5

    32f178f18d31cb370550fa92914a65b9

  • SHA1

    52d86a269fb24c4d8a2064a699701357690e8b35

  • SHA256

    fac0e4e8f9fb9c8c6f092aea51086e6cb0b707f7d30c6e8e9325142c8171f386

  • SHA512

    fe4d9d71f29720ef2514d78060a29a1c3f1a9fa0f609f451c29046a5b19f23c0c7fd9b5022e6a5ec4a70f0445c6747f2b84b81dc9cc2abe6507b8754c185082f

  • SSDEEP

    1536:5ARAyucO9tt9vGY4GWngO6FKsAJZjPmnHohLxzsDWCt7HfkYWXpO/b0M:q+OO9tWuW4KnZjPWHysjt7/kQ/b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\32f178f18d31cb370550fa92914a65b9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2264

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          028630e2933c462bcbc4703b743f865b

          SHA1

          611021e78fcce4cff4b1a78b2aebdd9937fc285d

          SHA256

          01111fc9bf83b9dc20eff64c650c4bd82bec5d3885f2ca4ae53761d01e346d9e

          SHA512

          1763533858213d1646233395fb7f43a8ccc6e419f7a3f3a6591665a33790603fcef72906b2a85e38f05013a6035f01f23259918c49868107328ec3c84e550ed1