Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 16:10

General

  • Target

    594a3ff102bbbd318645059b9c7e8645.pdf

  • Size

    81KB

  • MD5

    594a3ff102bbbd318645059b9c7e8645

  • SHA1

    9d4138e0ac9df321baa6bd744bfd47d6772bb52b

  • SHA256

    213f66c9327edbefa85834eccdc7ecbb6ad75f2572e58d1bcedf07244d0a2efd

  • SHA512

    42fcd4fa4d0fa523996d5089531babf91e8879ba08bec677c2e85a82c357fe9fe4aa921ba0d0817639e27bf92c3501b607b2bc2e7973117fe4939df10fd55472

  • SSDEEP

    1536:vRzey8RW1kk8PybS6HqltPwl7SPNXeONyM3Kt4LasXyWcWUpO7qWuLcyoWzVM3p:Zd8RWBeXwpoNXeONyM2UyW/7sLX5s

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\594a3ff102bbbd318645059b9c7e8645.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1476

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          97e39706a87fa89abd530c8277e6524b

          SHA1

          ed83fb1a54c751e24774fb9ff458187c6dcc4dfb

          SHA256

          782a0aa04d48377bbed4f85d0acc6be849efbe5d5c6f73bc8232b894de8a5645

          SHA512

          b94e2a0fc8347699c302d2080abeee81570a6a05d44eb6ffe3722934aca6e632c1dd3082bc0ec079bfb412905cdbdcd8cc92e79a2f9aac4da9f8a25eae01bd9d