Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 15:49

General

  • Target

    e1764f924d6f2adc269c93af44088231.pdf

  • Size

    77KB

  • MD5

    e1764f924d6f2adc269c93af44088231

  • SHA1

    de18f8a01002a82dceefd988581f7856523cfdf1

  • SHA256

    c6e5d8a80d7a259403a33a7e2ee4cb26356edd4a2cae93ceb1e220756cf366ce

  • SHA512

    d83dd97361b7ef08e58e5a9c2746686f99ea34ec20cfeae514c0341b3af4554921729d3935ce6fd0118d4c55076f702a363dbe92071a3e47cec94ca0c3e10c10

  • SSDEEP

    1536:7kemguNHQh4pt3tfHecStPFKvtKHSHI2zHRifzNj5D6QMMa4Bkwt6tMj:oezuNRptsI1KHdiIzNjt6grBkBo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e1764f924d6f2adc269c93af44088231.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    57e6b5cd22874f8ed56aacd2ab5576ae

    SHA1

    78be82024b3c5425dbb26800cec30cc0f95bf766

    SHA256

    d28f58eb204dd9c63e205c718ec17824f74ffbd0ddd611241f92ec5aff2e67a4

    SHA512

    aad9ffd8c81d606fd147332095a1bff2e24bd02b9c8841fe01e2f3f7d5b6a5cb76b7de37892eaac7bb9820e5ffe38dc0f8b2aa46f4cad7fc8a43a89a58bef71a