Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 10:17

General

  • Target

    844bf0d3741e2957cf5e63f0a80a0259.pdf

  • Size

    67KB

  • MD5

    844bf0d3741e2957cf5e63f0a80a0259

  • SHA1

    47049941ee8fdc26a912f35fba473d6e18a5701f

  • SHA256

    1610e3b6e29eb0c3d72a9c0ea660343d3b11e8f6b601a03df214bd3f44eb5329

  • SHA512

    fd1564ee3198d307a033594b031919a9ae163e21c37247bae95e2ab25964effc3500b438e1dfd1bf9f87f5a3cc7148a68d9285b218fa8eb053f29843e29126e7

  • SSDEEP

    1536:5idowbaDki7C4rVcw9JrvyuGGC4nPt7KQCVP693ZVo3V6tnP:0dRmXtawjv7zt7bCVG3ZVoF69

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\844bf0d3741e2957cf5e63f0a80a0259.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2136

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ae939010c18a70376ac5af9c87404dee

          SHA1

          65652bed57837d5b20eb3dc3a3bd7b2be0b5f284

          SHA256

          ec784887da9884dcbcca1bd663408e762883f909b13bb1efaef296454d3953cd

          SHA512

          7055c77951024488157f423da17f5ba66fd303a712ce4c007e0bc7909454701d4b222f7abf68a9e2c41058a82f3acfaf271f31cc144d1cb692458c3d33d646d9