Analysis

  • max time kernel
    118s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 13:13

General

  • Target

    9be5f760e816dea50a6c0f0b129d437c.pdf

  • Size

    95KB

  • MD5

    9be5f760e816dea50a6c0f0b129d437c

  • SHA1

    5401f2a00fb494cd2fce617e5c7d32131c2dd860

  • SHA256

    f1c774fbc69411a1012f13a15006611ac18110cf4da1fd4dadf48c6bd7f057c3

  • SHA512

    f1a7989489cc14066eea77f5ed8f3fcd9fb7d57eacfb348d65a9b99b174f6f2e1afcaa52bc76909ebecee6ad7707652a8ceca0addd46f027a7eaee7a14d1b17c

  • SSDEEP

    1536:TGj9qzr7qZi9Tasg/i6/23vlY2yyga+N1SfSr0YupkbVV2mGW6USayIUjiGESWeD:Sj9qzr7Qj/23vBNgaAkUGBitbiZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9be5f760e816dea50a6c0f0b129d437c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    58793eff108d6b2c888eb612a31064b9

    SHA1

    aa97c8c0a51c8df8e8b59cb7a618251acf88e752

    SHA256

    fcd03b50fc00faabc930713d96b1d0f1fdc0829fd149fc4655f990f650de2636

    SHA512

    3bb7882d883336567f91aab0d2eca9cf7039693f5db8d1251f3c2f01a75cd37746edd60eafc923c476e4ca3d38606a34c3b9f6ec9e29648e810cf55723dc1305