Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 03:02

General

  • Target

    019b839b14dfa25fd1da4a6445da930e.pdf

  • Size

    80KB

  • MD5

    019b839b14dfa25fd1da4a6445da930e

  • SHA1

    2f7057ccdc736065992e720a5f3b9bc9a4a7a553

  • SHA256

    fe6a57d882103c6e6b0da9a81355250573fe3257089cacbfd725c9c7b9cbc82c

  • SHA512

    d637bb23a7ba20b2244eb6ea59603d8a8294e26b8c5063213dd9d793bca98043d1178477788aa3d48d029450dc9621d4e7d3f9a0c774e63ae377f7bb9aec94fa

  • SSDEEP

    1536:eWenMbU9MW1vS7YPpJick3pS+AJOkuOg+R6G1HIWUgTv66WwRBePdrFUWspORa4R:leb1vxHk3PiDuOgY6GdLi+RKtFPR7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\019b839b14dfa25fd1da4a6445da930e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d3866a474118a56c3402566adcbe3e84

    SHA1

    e7ef88ce1d9a7ea92b44b5a8d45ad85a8e87d9ed

    SHA256

    e983a20aa66cdf000c419a40921f4af7163e8aae650debd6d442dd981c7b105d

    SHA512

    3eedab03b7e5307609ab8bd5ee6db91744591f3ab842a019c6ea58ffe2c9ce3f5465a7a32c888267cf0301d897af786e12317d08fe491165fed3c1321f24b25d