Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 13:42

General

  • Target

    371c69d717fd6cc80b2a4dc70c422704.pdf

  • Size

    80KB

  • MD5

    371c69d717fd6cc80b2a4dc70c422704

  • SHA1

    f6fe7f3eabcdcf38f2ec5f3140174e41fef31712

  • SHA256

    7411d78dbc5913436df8ac62df2b942b997d9defa4d4b35e4aecc78f82447a3a

  • SHA512

    5f0927d598a6fab47a456303cf0a7aa92d5316bf3ce495a9ddf4257e383018da7a0f81abef7edc6ecb4fbef1f3ab21604c1768a8c24d94f50302c5c9150fd33a

  • SSDEEP

    1536:l1MdLxNuD9AgIyjDAZW1rSqPHYiLKe5o9m5q7CAgWOpOwrpnQWw/lHilJfT:gd1sDnpjcU1rVYqKe5eE2CmwrNI0lh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\371c69d717fd6cc80b2a4dc70c422704.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2480

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6c7246176f9a8ef201ed007db0009262

          SHA1

          e5935f2f70d11c6a97c1a0a6b037d64295d4ccaf

          SHA256

          935222edb451db9357457eb1999d64da5ffb0692a23b4f25be6e7669ed2ddf16

          SHA512

          15fb94860b9176d9f4125ad8ab4aefb2060479208105a307d56d508ccec98bb9554043b505e7e7f121a36180c58e09ccd9a9245f774868739acc5508ba38a601