Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 15:14

General

  • Target

    d556e154c0959f095a91b91510f282c6.pdf

  • Size

    48KB

  • MD5

    d556e154c0959f095a91b91510f282c6

  • SHA1

    2ef81041bf25a2983dd402b60f6c5df17b4fffa7

  • SHA256

    0ce7a040656f6a8f06061db5b58910cd54dda6d295ebbdee728f808853d1a04d

  • SHA512

    97a0d6179aff13101d72f51ae07793cd3999d2988003b99057fbc8533b457eaf1e99a6b76cc8ea40d7bf40380185d9c9cab11e7de0c0b37d7492c704d53fb1f3

  • SSDEEP

    1536:wE2AdzWySA2MouYiPcDMZQeuC2ROOf8QiF6Z9OX:l/yyS/MouYi+MZQeuTOOf8QiF67OX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d556e154c0959f095a91b91510f282c6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2304

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          350954b32f2ec0bf45d96e44fe9b4c1e

          SHA1

          71dece932d353f5323372f67314408c445c23b87

          SHA256

          d9fa124519efc60ed4e52a80a848e77291a6ca104578854501f76f790016ba8a

          SHA512

          4656a8d6b5aa1177a655f5bc8e0b1ed7f5ca48d23af7172b40bd2be13b55cd45eda5dabd6cf1b3a61badcdb1dedb2fe861869ffcd6dc1b4f8cda78fac91ddc43