Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 14:30

General

  • Target

    432b3454a4b3acab6f1a3a67c64b7591.pdf

  • Size

    84KB

  • MD5

    432b3454a4b3acab6f1a3a67c64b7591

  • SHA1

    82d952a4c2aac01906d1ba635251ce0092467ffe

  • SHA256

    54691533116e8c857464d3f81e726082830aef99e1d233f08175f7635e0fe77f

  • SHA512

    07616ba9d1b8257e7d0240681dfb9446094b9f99b4f01c2e6773f4a1ef2f7d72d8e32c1b10fd103edd4e1b1d4dfed0f6b4da78ee6be224203777bdf6d6f567d1

  • SSDEEP

    1536:xQPRiBrMkZGKJ7OL3TgYqRkqM9W+ZJWkNpOPyPsJtHWWEgVyIERCWm:mRiBrRZGKJSoJOqM9WOyP6ctHig8IGs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\432b3454a4b3acab6f1a3a67c64b7591.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2128

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3f89046daed80dcab9962630cd4b7e13

          SHA1

          5ea28eafd51bd8c4d334f3a40ac633fb37f7d9fc

          SHA256

          0683370033404170ae0377133c5fff3d610aab1e43e04299e9d08a8ba3cb25bb

          SHA512

          da1c28307425d0090750b50bce5b12c4fbdac8838f9829789abdbb316626ea9ee89d565ff87b8e9306545f51967884864747203bf01ed908501d45adf23eded5