Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 14:38

General

  • Target

    446f4e9a9dc13daa8879d1019aaef835.pdf

  • Size

    86KB

  • MD5

    446f4e9a9dc13daa8879d1019aaef835

  • SHA1

    9f43be05e2ad3aaae0ee7db2a721773e6fd1c8fe

  • SHA256

    f0b0fbf2ead9cdf1cea9d4408e10614688e45156265c2bcc6cf1e9269880dc7a

  • SHA512

    e84a9b7b775f8d0675afd23352f447985d9ff4c6ea596e753bdf669e64183e3af7b8500b6407fea7750011c1f0196e70d561a254cdd62e91175f9bae45d6b2fa

  • SSDEEP

    1536:aa9R0Ts+J9xy7/d11ucOWeKMkoaEG5tecIFm/fLISQ1maTo5WmlWUpO7qWw6OhSY:H9et4bD1uFxeoaEA4cx4mac5WF72zKE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\446f4e9a9dc13daa8879d1019aaef835.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    13fa64d5eaf01f24e7ed53d9e312da98

    SHA1

    4af85b8d3beddd76e2a05ffacd6f8b6090961aa1

    SHA256

    70e1f276874eeb7c6f2fc99b50dd8df8751be908e0241ef138295bb74860606a

    SHA512

    5da063fea8929c703f54fc14374ccdfdfcead3fed5022503177db12a7f72dd269fb3d386240de9f1b0a68010d965710fc7cde4a08e85f864362a3dc96e7f4b52