Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 13:05

General

  • Target

    97a9db9e88db649c9b902db18b0948a6.pdf

  • Size

    34KB

  • MD5

    97a9db9e88db649c9b902db18b0948a6

  • SHA1

    28c415680d3da50a3274cd95ae277d5b7e7be7b9

  • SHA256

    02b1774cc6108a808880da457ee4fb95de3d647cbeb9e8980c82d5944cde02c8

  • SHA512

    f82f09b272ca6ef3cef057423402d176a4cbeb8c18ef625138bcbabd5b376149d6a4d003d6ae8a3818646a289edb53a6bd0e8e95027dfdc02c5f383f154484cb

  • SSDEEP

    768:nJKZvpnux0sqYAGv0IP0E/uLmrgKIGdxkQfPsB4LG:nwfu6/Gv0IPj8tGvkQn+4LG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\97a9db9e88db649c9b902db18b0948a6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0205ee85acb391933ddaf9d3778c15e3

    SHA1

    3a9415d3868421577c8a497ee1a05fcbb774eb69

    SHA256

    b858a0108f415d772188db5aa4414d67045791595e943701e98c13b9b4a9117e

    SHA512

    4cc36dc83495004b80e2abb59d9d1b01a70af871073d69a0131b040548ba02284b23fd2e7694ac21234dd93576bb6dfde55c9fa77292f659bd0797ea34c750c4