Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 15:58

General

  • Target

    567a3e6f4029218c4005c7278c08efe4.pdf

  • Size

    80KB

  • MD5

    567a3e6f4029218c4005c7278c08efe4

  • SHA1

    3e9d7446d4044c8bb35fedc7e6258435a491fa4a

  • SHA256

    5001d56e8fe71410341be706e7ba1d0d8ffba64f99b8b37260786ebeda6d3805

  • SHA512

    c9cef4db8f0ec582800fbfd10fdcc47b9d5cd87ac64e11cbac026f0d4f05c6406ebb377ccccc3c7c058ab7121c00e97667c4b0215688b32a3e5e49d5b6a1cbc0

  • SSDEEP

    1536:hT6REVAFqVVC+t6e7GSyK0RD7sdZsydxwWa7GE2op1tHvWcpOmNVT:x4EXjlGNK87sdWyjy7YopnH+mP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\567a3e6f4029218c4005c7278c08efe4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          98589b887deb449c51f47a51c925669d

          SHA1

          cefda1da4c1c5c08c369dc2927df7bb5505723c8

          SHA256

          be4c689106b82d625a0d8a6aabdab270b0586fabeae7ded6a9ec9cf16ad9a485

          SHA512

          756c6d46cb98cf05075529206a2cd72e4d1887aca12737ec1df6d702e4b9be64dea830e4c420877d6a41ce13d3a4263ea47919d991dda15075a00ac2bc529eb7