Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 12:54

General

  • Target

    917fe929b8214a0a277cd9b3b6e01367.pdf

  • Size

    67KB

  • MD5

    917fe929b8214a0a277cd9b3b6e01367

  • SHA1

    fef239dc2db0b772a6c6a4ac7afe8c0842879252

  • SHA256

    3e0ba98e20ef29851647a89c2f2049f6b2983fe9246b13686138d6f8961c1f08

  • SHA512

    49eca383c102f2db1bf5fd25cb179c39b234aaf8c19ba8816c126ce89bf358e48d4705519c257b07a9f49a78345a946ae1fe2f0625f02d32ea29a12c46957b7b

  • SSDEEP

    768:/GD6e9YS4q2mBEyDnHKP5Dk1vdSmVHr1eD9bxzClnkOSnsCUateMLnJD9wywuuq4:w9v4C6An2sCfeqFxuqLJicBA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\917fe929b8214a0a277cd9b3b6e01367.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7a0334659186c59228fe9fdae77dd711

    SHA1

    ab96fb55871f0a8083a1590f70965969b79754a9

    SHA256

    84e3d6fca72ae1426afdb6ed944048f3507a171d18e37aaecc5d0bf92d514c89

    SHA512

    7a0432750cd4fe00d308b75c899ccf2444fda80d868613e232f94c6e4fdcf43f0591d503c40f90932b5092ae0468b118bb53be8f08204dcbb314f1917f633180