Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 14:33

General

  • Target

    c611c2dd0562ad7a40c0a8105c9c7422.pdf

  • Size

    42KB

  • MD5

    c611c2dd0562ad7a40c0a8105c9c7422

  • SHA1

    39ea69da1e26349ef024290777fab81ac235f453

  • SHA256

    59112fd9b106564f0fc29eecafb2420986d75ba1e5497b4f2f5b6523621d23a1

  • SHA512

    60ac01d3a53fcd7f5aa225cef775adffad389ad173cd5b88cd1600217067320a1bc8ca402d232c5daeca8fed16371840e32861e80fd78f1aa5ca7051ae61e680

  • SSDEEP

    768:QFvZKhkitcEZ2zHb0FFspvZIEiTSzjMsHvEewmqzZ39cm5H0ZMWCzRmEbdOK9YAh:0sStHapzZ39cm1u0Yhg8h+c8ZVZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c611c2dd0562ad7a40c0a8105c9c7422.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1848

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b7234af2d4c56b49294f1a282c621f9d

          SHA1

          8b25d4dfb617f500cffd32820c0cfd3d108e7688

          SHA256

          17c4464ee64fda9ac35b0d767a07ac2ab99b39b5e30fb0b56df74153508ff40e

          SHA512

          8915057e30268161ae5fe78d18dd6bc10e4c7c6fe8f534ab1adfa3a33b42a239f96864f0dec3adb9dcc38ab2d7233ed5d176f92142f394e98336a2714b11b9c1