Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 10:11

General

  • Target

    83fa9c33497854ddadeac87ccd00496e.pdf

  • Size

    88KB

  • MD5

    83fa9c33497854ddadeac87ccd00496e

  • SHA1

    cefa9bcac7a8d4eb1365704ae1b3a699fc121c71

  • SHA256

    6b7296d875dd97927ec33a2e3c21873d7ddf83ad4438eea5cd0333aa7e377c9d

  • SHA512

    df3d76345fa0bfa238c0fd6291c386ec72b44bec1f5948ad392d958bbebc91a06664d011f69f0da32aa2ec4c74e96c26881cabea94a2bf788d190585e201b1e4

  • SSDEEP

    1536:r+E0Lro9WkuM+KsMLgckbZVXpMgib/Mh+nB9wksaW8pOGLf/uw1IWNy5eHMB:aE0LrCWkYKscgcmXCge/M+2kGGLnuw1k

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\83fa9c33497854ddadeac87ccd00496e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    78b3e4ccb955c9e6cc6ad7acd2033a37

    SHA1

    709261cdd37f32c7f6b56a9af505e5f793a33748

    SHA256

    8945873096b36f503521fcaafc9486bb9740b7626da73bbb847d1d6738ad0080

    SHA512

    7fee73da1619350af3f40ae0575142df7ddd64c1118d54a0ce233fdd11a6c0422290ecd351d6abc4e6e2e7eb2e17f30cf11dcf6238381d5abe244cf4130bb7e1