Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 15:44

General

  • Target

    df1af91bf5e26254ca847e1b1b5106c7.pdf

  • Size

    66KB

  • MD5

    df1af91bf5e26254ca847e1b1b5106c7

  • SHA1

    28031eb333ccc6fc2c8224815440eef3a0ec9063

  • SHA256

    87e3cc8ff5ce073cc6c3a23ce84faf3175719f049ef9bda71f9a2ca2b6befb37

  • SHA512

    a3e1c9ddbc656e47305346e4ef6b7f12585a1ef0fef41bad6cb01557f69920c7223085e68fe10f7dec1232a19f64d81ed38051191b999e9258025eebd9c7c3f6

  • SSDEEP

    1536:VqCZCVUl8gkcY+9M5//t+5mC8ac3H6M5crvgA25wr47gr:0CA0fdToN+5mX/hE4g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df1af91bf5e26254ca847e1b1b5106c7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ccc8b7b7222bb5444799f8918ba88b55

    SHA1

    cde064f01a5f5946fcc862c4d5396acc7b085b6d

    SHA256

    ec52d701b42303acc05cb3894800e2a693c177bcd2bf1f0b3d770c0b638328c1

    SHA512

    4a21f47e9636893e39c9937189d21b6b142b07c5a3953110f719519f219e14df09a19de6446d30c28fea355b84b35f53dd3ff10b33d42932229351e4836cf127