Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 13:19

General

  • Target

    9eee5563966065573b7a34f6880624c0.pdf

  • Size

    62KB

  • MD5

    9eee5563966065573b7a34f6880624c0

  • SHA1

    5e9a9aeb18f0987d192a9c90459669c7a0f7ae2a

  • SHA256

    ec2c1cbc6f271cdc3271bf9f181f757cbfff17336fa65fe55c3ace417dd5259e

  • SHA512

    3a07987761b0c99fe8f9a66a8d634682b1e1868f1e8e9b76ce9fa60913c007bec2718bf838ae0d436db06ed45c8dc1898ff924bcc27982a478f5d38376b2f04a

  • SSDEEP

    768:g9VPSmA77V9dYE58WH0z0kEoE05WtYTdQehebJIPZhIxoyNFS6mCnkENJNgx+Tsq:g9VPydKWbzehebyPZhAoAS61NJHsp0PX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9eee5563966065573b7a34f6880624c0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5416aa2dab4514420653e75cab7042db

    SHA1

    20921dcbe9cd5f2b13889158f2b315d5212409da

    SHA256

    7e08fdbcd9e228fceda9106cb24fb2ce4bb9db3257e729082f66ad0d944ddb15

    SHA512

    6a6bd8d843af7cf096ce625f1693460173bb8c1e3ea746f8b9a8c9f8a37d8a61c3d8f26e765f65a053c98d1837bc024b24557ab9ba9ab8e0e1a340e69d2128b2