Analysis

  • max time kernel
    177s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 14:50

General

  • Target

    ccb810da80be62f07c6bcfab3152d68f.pdf

  • Size

    72KB

  • MD5

    ccb810da80be62f07c6bcfab3152d68f

  • SHA1

    9727eff8e4ff5760774239f6067853c7df43bc2e

  • SHA256

    82ce59e0ad2f56983756d2dc89fe1dbe6ec4c188187a4b4f14d96c8a876f44d0

  • SHA512

    4f05454b0c86a34c2ab7d3d1544a23b289f7f42e23d2656cdda8b4fa0360f1a82bbc0152c5eacf297a3e523662531dc7c84d9b64573e702821d8f1bbced8c83c

  • SSDEEP

    1536:pcGoGYJeyVyMXuA4947EZxdNIPVAamkartLDU2C2yIYSVJ2ehzgkUpdcoRp:7oGG+3ZYVAamx+P2yI7J2wskUppv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ccb810da80be62f07c6bcfab3152d68f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2584

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          852352d7f3ce22c3e17e7f1bc93d4d84

          SHA1

          9e2aaf2b998fac2257c05e4e3280ca549952f1e4

          SHA256

          e091ad1c8bd6852ff2728d81973019aa4f5ffcd1e861ecf95d1b135969ae2db4

          SHA512

          970c1196e7787053a772d2e0ad31ea42b3cd006333c3029404b2fee9e7be8abd1ea117f971ff272b9d16e38a2f9a56987df91cf7556d84e31cc81d03ca3e54ae