Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 14:32

General

  • Target

    c4fe2f7cf46bfe2b186dac09a8306314.pdf

  • Size

    69KB

  • MD5

    c4fe2f7cf46bfe2b186dac09a8306314

  • SHA1

    0fca3d0f69325431099463fce86a5b7a9e11e4e9

  • SHA256

    b973613c3e3a046092796e7c4f51449f34cdddeeea3b90d3c0ed644d91cea049

  • SHA512

    2d3a22b54fbd15aca685de3c05f5476ac586758b72ffe96763bbc204181b7a84e57c92323f1a52431673cad829aa140c4990a1bcd355051cc1b6bc9b7ec8e4b5

  • SSDEEP

    1536:NkBfcfp2lA3RzWqwr8HE5WNmyvJT71tKuYL1AXTjOPRfjnTukXM2VpTpl0:OsJBz4rUE5unZYLyjQZ1XMkpTpC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c4fe2f7cf46bfe2b186dac09a8306314.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2516

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1b69c693772866aca91b3ab529c6f6b2

          SHA1

          9b81e6db81965bdf1e455d261c11821ab3df83d9

          SHA256

          969cb68857501f23de48523bc18ce8efde869ce9cc3169fb2d40e0d36098e763

          SHA512

          54b7ed298b6bd318e46ad3e3af9607a2fab3a792118491a32576846813e082e74f4631f6ed82f73eeaea2b3740f2ba7ec3dc39a3b5adffe48262925d46359eeb