Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24-12-2023 21:16

General

  • Target

    12a022e3ae89e9782c7e041fdf795003.pdf

  • Size

    87KB

  • MD5

    12a022e3ae89e9782c7e041fdf795003

  • SHA1

    18c4351998deb5313fc3702490720ef9c3f0b0f4

  • SHA256

    8f99082680fa69204d8b1a620a01b6c935f5f0954855a7f295493089a4179f28

  • SHA512

    a8578d93af3a0e368cf00039abf4da24df84ee93fb6de82daafc2427ce1dbf9290d948646e2c2ed6dcf5c3c513bb0f98394469ad125572b3c40ad2e0308576dc

  • SSDEEP

    1536:xgnrcbjbSdg9QzXeH33U0uBuURXKk8h7mmQRY0GWypOlL3KPiZla5WzwpmUz/aBV:P+fOH33Y8URXUhZj4lLaPiCNzi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12a022e3ae89e9782c7e041fdf795003.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fdfd49f9c2eb29118ce7f0e1cf66a0a3

    SHA1

    ec61227a3e625b2521cec8a191ad9d4b29a7f681

    SHA256

    d386733610b3ccbf6af4971ad28b6c97b270b5577bdecd1fbbb1fc423f0d4a4a

    SHA512

    6185ce6d33f2f748aabe85d905eeeda219202da2ad1ed0c120b900676e03c571eb04ed042da96ea6031d67cb54660961f5e793ad05c3403136e9bc425050f131