Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 13:19

General

  • Target

    9efed318d919ccfd4f76e861bd536ef4.pdf

  • Size

    81KB

  • MD5

    9efed318d919ccfd4f76e861bd536ef4

  • SHA1

    2555066f20ad59533278bcc1cfdbd638e4d950e6

  • SHA256

    e184258f5054d3f5819236ce43339460b11ea4213a9ff08c7689fbc7aa5eedf9

  • SHA512

    5ca19d6e5769bb62c1317e006f6f0652fbac0b4da39d3e52ab6e197563e7ba4bbeac5f811e8a78b2428baf05dd57c78529f732ce613637b53d599d914b41c245

  • SSDEEP

    1536:PFnIN5dkfXTnFM3X3Eto4puq8BJ779AaNfC44Pmq3FzLWQpOCoWkwLLuIMrdRVV5:k5SfDnm3X0to4Eq8BJ77me6oq3Fz2Cry

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9efed318d919ccfd4f76e861bd536ef4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3004

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ad9591b9e8d87f93ebab0265564faab2

          SHA1

          f718842138089ecfd327031d28742a3a270f9c63

          SHA256

          5da71e52ac3498868713ecd4dc9894d585f6712f4611dbdd63f7c1c894206475

          SHA512

          0a39cf8e76c7a13d900326bcd7fcc05ae1443ae6cb9f8e26fcf9ae8e6d025b4ad5abb18feb133b60866faf1bfe0d44b22b6418577615112219a388fd7313601a