Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 16:09

General

  • Target

    59181f31f20d8e6e17eb207d0848e6d7.pdf

  • Size

    87KB

  • MD5

    59181f31f20d8e6e17eb207d0848e6d7

  • SHA1

    e2ef649d02d3c4eec834f732a307ea88c5d9e9a8

  • SHA256

    b3dfebcaa6d13829070b7d5a07bec0206cd3e30632f28ae28533f6eabb33bf6e

  • SHA512

    8945ae056a189b3dc784c495a6e51f79deffe867714e3f77cae2fff71b5db77300d6fb018a2cd942add37e3b0b89fef5fbe9095e161dce3919ac657d1251621d

  • SSDEEP

    1536:vrp3Z/Ib8UY87M41fsj73xSHHxh9NCDfFpqbE2WaXMJKo4zGvuRwtWxApOGzWbSY:jp3Z/Ib8L491fMzAHRhXCrF4I2WaBo4b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\59181f31f20d8e6e17eb207d0848e6d7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    07469fa7870a7526d9fcb763fce0e1e1

    SHA1

    f1ac3a5f9fb720c6a1a3ff4cea3a7a374f8dead1

    SHA256

    bee76575a38b0820d6a55c8e1088a7b060fea9281d5e2e2d0ed518b6ae30925e

    SHA512

    8c6113b9f623c14e1ad46b404363552aff1d633badc5c4021c6c82488ea82a7d096bcda23bbdb0cb59f03f71a89cef224fdb8de7ee60f77bd2b311e8f5289948