Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 15:01

General

  • Target

    d1379951baf5b76130e00fd6c465b3ea.pdf

  • Size

    84KB

  • MD5

    d1379951baf5b76130e00fd6c465b3ea

  • SHA1

    411faef3064d4000bd566f4d8f1ec97e90abb615

  • SHA256

    5cd12dca767badb51ac5a62aad28d50147224989bd6c9a000d12112a4106fb35

  • SHA512

    b65b6f07e0b34a5f0a16cae74e7b8b74d2e12e4c25ec58d285bdc184bf238aa26245861a24ecb0852527ed0dae42a2c6588d2f62e945159a87ff68bace156e3c

  • SSDEEP

    1536:74wdJtfdDO+GwBxQIZKrkyvqwGTiYskH0e9unWXofHXgyF7EW8pO77pN:3ZVO+GUxQIZKrkA1GTiYdH0e9uYofHXV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d1379951baf5b76130e00fd6c465b3ea.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2164

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          73cf2924e528cc889e1621c52e378318

          SHA1

          8862af031ee7d53c67e342419e9dc12eafa56b9a

          SHA256

          4c3cb664151f86c673928546c55047a96ea2654463c147f8b5a8586297cb1a07

          SHA512

          ce7646f114cd3fcd6fe082348fd34a17a0d2fbfd206c4d27bf28c979517f523a4d4dd0681ea12a92ab0c40fc845f6125bb3cab1a7d327d3b26572a981955b3b4