Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 14:50

General

  • Target

    cd1069ce943b1b225901464969beb46a.pdf

  • Size

    34KB

  • MD5

    cd1069ce943b1b225901464969beb46a

  • SHA1

    b0799a724d19adc279fa45e7b21d30819da5ee62

  • SHA256

    64936b775926bfbb756713e7ec7a44fdc0922a077e54b73cc65ca39ac34ea0ce

  • SHA512

    e251a1489d09f2872a2185fdc1a58a8371e6c74f4b228ae1d7f8bf4015a6fce2e97663533119fd5609414655a779ca37c9ece2d17dad15303fd631b3ff7af7bb

  • SSDEEP

    768:Elhd5vYwKS3/MaX8RRMT2jkuCj2sy8vRMbxQqUNowI+vB/uDMQkdrkdyO/wlllwc:z1RHORMb1woM6MZr4yOwoiZVo4N

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cd1069ce943b1b225901464969beb46a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    580a035cd9e4ac9dde2ba01188795081

    SHA1

    9f0095de8c79b50a10f7545c5130586e4db215fe

    SHA256

    4ad1bd441ebd96ef9ad921a6dd641b60ce919b7d2654215f336b65f85e02e87e

    SHA512

    b7ff94df1afd07f55768ccf5fc0b93ba2ef6fef230491aa4db5fad8e6c47d92208259227d05c19a7fa92befe06667ecc1a871abc83f66c527f6a345e5963e9f4