Analysis

  • max time kernel
    121s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 12:57

General

  • Target

    932acb355faa432431d1f7ac4da0f6eb.pdf

  • Size

    33KB

  • MD5

    932acb355faa432431d1f7ac4da0f6eb

  • SHA1

    01c9ad72dfa1f5afcc0f50e062d71906ffa233c4

  • SHA256

    e301717b4c34a8235c7b77718a0fded5078847c1c9536920db608bd9c3725fca

  • SHA512

    7fb38d989d3118600676da3a1e334f73465302547a3cfb9dbe38905a6a3b21df1c3d469184858ffc602244cf741d638f09ef4d3e15ebddc96adf4b5de4628855

  • SSDEEP

    768:ZRmvk4xJVHQ+cA+Tu6DVEGnCQsf4ZgrAdIocZcxTBO1yXn6T8L1oW2SGos4pnRtw:PbIzrFzZcrOAX+8L6/o3PvBXk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\932acb355faa432431d1f7ac4da0f6eb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    523b767c40c1e05ab9a0203e4dce2c01

    SHA1

    224b4d251c9a89d427fcb0dc0dd3226e3b4a577e

    SHA256

    c1febfab726cf3f102b46f50e1b4a2c0c82a7c89c179f86a8ce97f59174646ee

    SHA512

    8cff83f7e7b10fb35cb13b6d8a291a8d83c70856bfae35a58a32fd47378041a9c97c088ea28acfd9b8041bc4d153e28cd66e28aea1423a8974562b2297efe66b