Analysis

  • max time kernel
    119s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 12:57

General

  • Target

    938084aaecc4ff9637a7e438ebb1807c.pdf

  • Size

    71KB

  • MD5

    938084aaecc4ff9637a7e438ebb1807c

  • SHA1

    23cec8815f3d9fdae65fbdc6b17e9b973439244b

  • SHA256

    0455bb653d2ed5c1f7bcf3f7a62376c630b2a28b103a3abd5d1b5afb87a5d76f

  • SHA512

    a0cf2bce9584aad8cfeb8a852d3b0c98e1a806d9b39942d3d7f328ea2672f5c3da0ffcff2333e47b5aa2dbb57ca49ddadb4bef72ba548ea6c6366e092bc7df8f

  • SSDEEP

    1536:VyiKgRVlPS7zLmFE4Y4N8Psjt4gZMblkQvd/wwQcetdzur91F8:4IkSFE4Y9Psu2Mblvl43cejea

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\938084aaecc4ff9637a7e438ebb1807c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2160

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          24bae11d59875cbfee8385742074edda

          SHA1

          f97f1fdae224e8b5bb16ae79501d71d89c3d2d90

          SHA256

          1ee2f6e4983f0ac21dcb08ca9640232d3e96f61a73fdc34f0a9cfd3467efa494

          SHA512

          6fe533f4b8c2cbb810ff0cbdf416dc300f09c7a5a75028439274181d14294cdee5ce7eed01dd3cfff260834630cc757a16176af5d856ebe8b7378dbe626369de