Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 03:03

General

  • Target

    585d283646961d94adf8b978682181b0.pdf

  • Size

    34KB

  • MD5

    585d283646961d94adf8b978682181b0

  • SHA1

    bfcf9111e76582cdf0afe18f9b7f048381489c8b

  • SHA256

    e2dc4bc8cac2bbf3eb25529b11ef4b2ad2184e8ff966daf9b2c4377746652a97

  • SHA512

    a96ed68d58baccfb9a8f1d0b3a32476589489283512d3dee62580315d0ed403abe606496e361da0c9ff799466423f0944bea32a4f7608bbd171fadb5d2ef9848

  • SSDEEP

    768:/JUtaL7Tmdh/YJdGR8hKKvwLox+99YUBOn2pBnt7moNpHfrll+HFkZ/:mclkt9YUA2vnFmoNppMaZ/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\585d283646961d94adf8b978682181b0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:952

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3551425d004637c0a46dd26a3f8aefec

          SHA1

          55f34f3e34d0c9be93d974fee0ca17eb4bc641e3

          SHA256

          78f55bf5ab13cc4e147352b1850b9eade8952b545d372a1def96e43c4b796645

          SHA512

          b3903bd5f3b1e737e64e0f75536e1e404bc2ab7dbab2fb0f856bf2d448135177b45ac22717256fd1de2c31e706715cadeb804ebe343b31b8e43e1e7a930f18ca