Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 04:51

General

  • Target

    685ab708bb4d9b968482dd8dc4cb3941.pdf

  • Size

    90KB

  • MD5

    685ab708bb4d9b968482dd8dc4cb3941

  • SHA1

    1b1c13504103313ab8508ae25f2a814dd1a60b54

  • SHA256

    16c12b881fa1d9e16de6e6ae8a834af1d43249f3a26d355e87f80afa5ff987dd

  • SHA512

    1b82dd6671a36255e7adddf94a55b243a009a4327c251eb83bc31ca6e9a0c9a4fe305ef592cc5e1618065ef25e3547b558dcd32b67856ea2b58adf75bbda57ea

  • SSDEEP

    1536:0a7I7B0nDNlfANTeEAX1mkWmIBmKcnGR/9k7pBXuIIQE5mkiCw:07BkfbEAX1mk7IBmvnq/9k7jXuLQCmkI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\685ab708bb4d9b968482dd8dc4cb3941.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2896

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          554051f6bf6858ce1903ab475ecad433

          SHA1

          d841776ae7733fe831ee185d1c57332806bda76b

          SHA256

          79ed7a07f7d65f3c4ac65936ca9fd189592ef8bb714290d3668fe00d8477cfd5

          SHA512

          780541b68fd4ab8e17babe7b618a3ef01c8210044a3e714bb8bf520094846fb16cd388619d75f79cd780d66630d49f63f72d59ad28b55ad4907774dabb353aac