Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 14:36

General

  • Target

    4423e5b249502155e64f1c3003d3bc13.pdf

  • Size

    81KB

  • MD5

    4423e5b249502155e64f1c3003d3bc13

  • SHA1

    3370b40b44ae3114bbf228813dbfd64b1ba6d204

  • SHA256

    88b85f9319443c9452867b753cb3b30fda17532ac647b102e9a9b894f2e85d20

  • SHA512

    7ef1e0eba5803cb61c3d4d5c51b7b9c39dc5a9c6e59852ca911239bd50b496200fe296f17c774097d3f7eebb8dceb8fb2bea170602629f2e4e61aa5e520675f0

  • SSDEEP

    1536:XZ55YkU5yb7m/qa65RJFyKaiBaUemTybobFJWOpOwrGrXhuWpMXfQFRTP:p8kRvOK9bRTFbAwrGlsXON

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4423e5b249502155e64f1c3003d3bc13.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1320

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          12392674c46fbcebdf31c1ef6e3e4daf

          SHA1

          2767a189955d48e46e4661982d221efa9c162288

          SHA256

          e7859ce29dab61674fcfee56a44a6de952d83bbcb52391a0b2ddc97d78fd235e

          SHA512

          f22a30a535090578e42c78e21ee54569e6cf08703efd5264fd3a825abcba305f60b3bee66a831c7f9a61d183abfa400016112f9f5fddfaec3c693bdc961fdef8