Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 13:39

General

  • Target

    362b43f3b62fcc0520b0222f3bab1921.pdf

  • Size

    82KB

  • MD5

    362b43f3b62fcc0520b0222f3bab1921

  • SHA1

    610239c8d1cd35ce45d472751d2caaed85521528

  • SHA256

    b6f9ac17bea30d3da714f69b1a3c41cb116631db0c75f153dbe00688f7d803e0

  • SHA512

    be3f81adb02d0861509c505831e5fa8e8df683c9b857d0a1a6f2caee5e8045e5feade5d5c77747f647a1d86cb4741e0ab5028ac23311304fb6734d62c0cc6f60

  • SSDEEP

    1536:OMfwrVYaIzEvJBg/s8o1X8Fxij+jgGDWy3+W6v4V535gN0MTFcW8pO+sP7:ZwrVbmERft8yCjg1yUq3qNnBX+o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\362b43f3b62fcc0520b0222f3bab1921.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fcd5573291c7ee7f6232fe5971038775

    SHA1

    7ce7ed278db3a6e338ff90c10519878713095a64

    SHA256

    d39f614111ae667d70704b454963b95ae4ee1905ece0d5c005591813bae939af

    SHA512

    60edc23dec8d9fb46e6d603d82150f08347879ceab84275abd113e900ca792c4648abfe356bd4108cbc0fc57cd8c723acfd7a325a4823245b9023cafa685353e