Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 13:41

General

  • Target

    a9fee403105f97653984199dd6e6eb45.pdf

  • Size

    73KB

  • MD5

    a9fee403105f97653984199dd6e6eb45

  • SHA1

    194bd5f40ad76e141e5091985d91b91d8675ee01

  • SHA256

    6a38f61a5879ffbdf648fd98aa051e0b6bd99ea306e8550df209a9fe7678c825

  • SHA512

    7a491815ef04663db7830b5e4ea66e3d0542ab6621e37b99cee6903508fd35bd1424da26d523a5edc439495aff64428cf661ac6d0578ce01b487acb1be1b7f09

  • SSDEEP

    1536:vIf5wwHQPK/E07tvO73UScdpNUPnq01HizZfOGikqqaQkMhpVfJpz1VY+:25ZHQPK/z7ti3UfHNUPnA9OGikqbQkM7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a9fee403105f97653984199dd6e6eb45.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    afb5dd268353043e3542d7e90fb69db5

    SHA1

    9a05eedd903eacf4828e58b78734b1367053175c

    SHA256

    952ef91aa817b71382e589fd457c7de48192bc3217ecfc8ea2641bc244eba3d4

    SHA512

    0491ebe44059053d9b7464cbfd701c09dab3c051013865d4397eee0c194895ba062459537397761c9a983832f9338a6057bcca05d1ed19b410989b1ef20f9736