Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 13:30

General

  • Target

    33df12311d5ff86355c6ba62c5e54a04.pdf

  • Size

    71KB

  • MD5

    33df12311d5ff86355c6ba62c5e54a04

  • SHA1

    156cb9cae2f0212b297824d9dc620c47e525bd57

  • SHA256

    965cbf7dc6f6f196fd6f30ac222e71a2e7ec2f3f357e97c1a52a1f1e8443d2d9

  • SHA512

    8242ecbde4d1460a0b3c4cffa111226db1aa63873af4d8fb6b6db8e20c21c270093fb49d6083ace10b96103e7782e5dc45dcb929f30ba7050d6e497e696ac210

  • SSDEEP

    1536:H/uQams68QJuG4Ts8PXoj2abWGhzV2MGEuYWxKyRHbZOVW8pO+cHT:G8s1QJuGyNYi+hzV2MGEuxKydZOk+K

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33df12311d5ff86355c6ba62c5e54a04.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f9ebe46e087bf3ec1185cb8d6aaaf195

    SHA1

    6af70791138020c31ed6b5e23ec0627129805da0

    SHA256

    838b150511622f105ed49a7d9181c37ff3cae48999d278bbd8cd1cfd19b69dae

    SHA512

    628c6e1bc0b926138e892d82f96f5c2126c87f336b7803e66001070d063e364a9b1a5acc0a0f062ef9b34b4585802e746a27f6cedc58f5d19c21fde8f9a3c3d9