Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 13:29

General

  • Target

    339b5e2b96ecafde06434884ec0133b2.pdf

  • Size

    80KB

  • MD5

    339b5e2b96ecafde06434884ec0133b2

  • SHA1

    5186144003bc7870fa7ede0710b30e72bec0b9ef

  • SHA256

    e8bb6eaf2bd84673e8b2f37bbfda7ac7f2a33e0bc1b3b9761388e1102b6898b9

  • SHA512

    0adffc510a3165def97f951d2b31fcfcbf6019d0cc874b2a7d827bfb6a7ef856d638d4e05b67bfba1b7925433f6aea808c41af01709bb318151cf1cf036da429

  • SSDEEP

    1536:v1L9KDOvEU+3UbX/nmpLhFxZzY1HB7K/UnXg1WapOtQHWjH2EsYuo+sZ:BgD4EUcUbXPmpLZ9W0/lqtQtYNl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\339b5e2b96ecafde06434884ec0133b2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2116

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a60b15eee98e2de5b55d5f264c510c01

          SHA1

          dcdcd1382f88ad2ec8e47a6f495891466e0215ca

          SHA256

          309e4b58c0b10188d92a4a90d3e7b77ed6689b5fc1912b33f8dca8b1232b4af6

          SHA512

          b589456a4248291a6becd10cb569329c514b7ac81c28275e52c5d8a1aaf01d8e1d49c31bc4fe1b4e9038f805e94d1324cd3a1151b47739ba0db1f707c8899243