Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 13:14

General

  • Target

    9ca136a30eacd671004e3d168fbeec19.pdf

  • Size

    70KB

  • MD5

    9ca136a30eacd671004e3d168fbeec19

  • SHA1

    4d4864749fba35d61949dfaff2b07220ce645012

  • SHA256

    d6ff92714602ce9fbfb25aa9f37426ce0625e4c6ec30f0223ad4bc5641bc1245

  • SHA512

    c50e1d3f8d054ea8dfcf7393ba5def6d990a3f4fe525f1b5aaa9a89bf844c71ac290e0b63adcc3c18e11237524774f591c7d125ae66d9ab132abd8d1c34c611c

  • SSDEEP

    1536:vTWhGFfdpxUdIfnYTFie/8o3CCo+S+M9gp+Nqd9mL0AT8+C6yPuWr:LWEBdpydIfYb/8J+M95Nqd9mL0ATlClj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9ca136a30eacd671004e3d168fbeec19.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1296

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          92214b78fb0899ac48de884587c1c6cc

          SHA1

          0e25f76487804b2666e6e46df8fb82450ddb319b

          SHA256

          0620db694e43b254ac342b07475df3feff38dce88bbc70091ccdb80cd22ab719

          SHA512

          e7fca97b52654148e10d12fbc89d6cf12e39fc4ba9726e929a69a5dc2a6d09c538afd0d4fa934660166cae2e176699f7d212583e59ba030893dc6556d3e769cf