Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 16:25

General

  • Target

    ee5c681e0b9613809d4a8e07eb1e5d38.pdf

  • Size

    75KB

  • MD5

    ee5c681e0b9613809d4a8e07eb1e5d38

  • SHA1

    393247b1579b39d45247d32d551c646dcc3fd974

  • SHA256

    7d0ea0581f7dd70d2ca0461b7b7a59826937e0fd9694673a19779d01bcc2c007

  • SHA512

    a51f998964e2612448779e51f7029a4da51917029772676a9ca47398b63f626d7c83feb49394d8159b70b1ecb8c337208da1b41d2e8a4031fa60cf134a2db7fa

  • SSDEEP

    1536:RzaspdLXIdyc8fM7fhrE31wvE5Q37OHCNAA8BSThugyi:NaikdD8fO1uwoWyUADSluY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ee5c681e0b9613809d4a8e07eb1e5d38.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          52f3fa1f89bf1615ce6f401d786b89d3

          SHA1

          2a60c0b263b53d95f97993392efd7ecd62eb8f62

          SHA256

          e98a8c81f9e7d5bf82661fa6cb6be0eac7fa4fcf3ea15886d3a2abfb281887ff

          SHA512

          6da98c0030a049dc1dfb4571bd2284b46105cc70f30097b2913d0444b46a31a8818054a84978588484ea6b3aafd39e38ca67a4834af0fb8d06ccc2a01f2a3dee