Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 23:46 UTC

General

  • Target

    1aa620899c912af63b6e68947fe34725.pdf

  • Size

    79KB

  • MD5

    1aa620899c912af63b6e68947fe34725

  • SHA1

    ce306de5c59f50c0ae455e7e17efeb3ce96c2982

  • SHA256

    53615b4dfb245fcd0dad2a161329d350d84a05afbcc47b0e4f79042c23539fa4

  • SHA512

    a640aa7dde2ea7c23ac37b9ef0e114afe3a39aa8acb1390653c09802d1214a14b300d7cf101aacdb7bb20ae77ff44c61a9f6279cf166cad473b080c6452c3502

  • SSDEEP

    1536:unVzrU51wEiQgy/0nLVphIZAIlRYgC4UOualk0L6tqmTYRUU4NjgoOqdhH2:mfEiWcnL1JgIOd/6ERUU4jgoOqC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1aa620899c912af63b6e68947fe34725.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3bc89756900869d6dbc6de4657922bb3

    SHA1

    319c26bac84ea4685b5cbb1ce5a1a2a8431d4f53

    SHA256

    fb2ae98c6afa068244f281ad447cf039b07f33f22c8262bd2754dc6ba9c38e84

    SHA512

    b11afba138f91f794020df1eb5708c2da14ebc3039639fae5fde9410e4172bfa1b5089f13015f97507b5ca5ca3a4f825e3a79ba8976a7cb46354f5964a240cdd

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.