Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 15:05

General

  • Target

    49db32aa0071d21c5bfd5f17fc17c37b.pdf

  • Size

    42KB

  • MD5

    49db32aa0071d21c5bfd5f17fc17c37b

  • SHA1

    2008cc06394569e81346bc76a70c1796aa3af89e

  • SHA256

    067f548b285719320194fa8351359c6a65183a1a2f40aa563a37cfefb2f09179

  • SHA512

    d1911be4c7844e9dfc2bf0fa09fb6a5319bd3df4ff8667bb81ed52139c6c070b63518c3acb33041d51c6f1cbd72b778941632f479fda3814d975edb45f3ae20b

  • SSDEEP

    768:wgGzpDIwRErjwHZv9NZlUZjfqds7la9Ejg0qA3sqVXnCj7FETkRsX94Qe23iyh:dGFMTq6s68KXCGwE3e23iyh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\49db32aa0071d21c5bfd5f17fc17c37b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7f656e29aa19daf6ba33088d7d0b024b

    SHA1

    b8511fe228d80e88838b6d2738bf621f2fd56744

    SHA256

    87e9bdc5e720562be4db34cf02381ec7e9214ff4d9323bcf5d0ad0cef08ff107

    SHA512

    a3eaeb1f348305f0b9e82b79a0d9d38e9368d9e9248556e4c7288e1db41233c779a4bdcc921b2a2eda0dec1ca4db5fea02e8186687391c675b769bdad131af4e