Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 09:58

General

  • Target

    832e1df35dc3c430acd867997581b349.pdf

  • Size

    90KB

  • MD5

    832e1df35dc3c430acd867997581b349

  • SHA1

    c45811d1a5096da4f4211cdb25dee0f36051fbba

  • SHA256

    c5d5b93e07446cca53ed0ab091bf2fcff93260c19f6d9cd02df626da838624ee

  • SHA512

    28efc241ceac369a56d413808881279bd3d77a06183c7f07778c5b44d83100b61faf37eb1d17522296b6b9aa9fe6808f158cee46e80ce8dd5e01c4a1ac4f743b

  • SSDEEP

    1536:TvCQm+J5M1+cZt9dAHZMHucqMMLby0QdU7veEE83HtgVrILX:3JO1+OtTKgAMIfeUistcre

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\832e1df35dc3c430acd867997581b349.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8b2a5e83693183d92815b8b131012cc2

    SHA1

    9174e73b4402091ac25dd290f682bc9e7c9417be

    SHA256

    2a5369621d63381c6f5fcb8fff5d918632ec418fb0a78e88151c2f7b66eda306

    SHA512

    82c2d7939d19531d61f7ab2f2d76f62f30d5ea89b215d9fa4a57dc6b525ad1d07131378245f847d5dc8a2f73b5cc0ef7ef3a0fab29b5c7d52da1cfee746ac51d