Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 21:58

General

  • Target

    14296fb575b441821d1313ce905784c3.pdf

  • Size

    84KB

  • MD5

    14296fb575b441821d1313ce905784c3

  • SHA1

    96e74f1ef1eeaa9e29071051b385d38728589ad7

  • SHA256

    9eef2a8fdec2fb845c2bda13828af8789d7c0dbc38e92d57e0692630790c2f60

  • SHA512

    0b9548bb700bbaa40cf9fa39aa068f9b0cac84ec836d068720e5c50e071a4224b4e0e4fda66df81eea723b6dd4a4db447db5e69a5a160a5138513380e0235167

  • SSDEEP

    1536:SDiWjYPdMN5+ouInujLHmaQnvuKStFpZmSt7W2JD4xnS/PIOit1LWQpOC5L5:KodMgtLG2KStzESt9J0xnQPFg12Cz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14296fb575b441821d1313ce905784c3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    12b42ad1d890e0b8a558293d9dbabc24

    SHA1

    2e02f4e9bad4ec4212ed84719ad58450b16bbf87

    SHA256

    365b1da0bbe2bffab2de7ef537ebbcbb01cfd23c83105628bdf30faa02207908

    SHA512

    6d737fe0426a2c5c41e748617c0f0df012741f7ff8cb643f162c7fb67d7be943ed5efdcd81c45d9d31c782a0aef387f9cb87a2077e27dede844a3e0a9d6c5fd4