Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 09:42

General

  • Target

    14e743821bca405b534c74ba0bedaa93.pdf

  • Size

    75KB

  • MD5

    14e743821bca405b534c74ba0bedaa93

  • SHA1

    a45af8de78e3866739d0bf4ab98f976a9d42bfa0

  • SHA256

    f58048696b9fe432f77ab68f6b81f475af91aebba3735046d35c107c65d921b2

  • SHA512

    2516b40a701918eb29cd449c1ca2819fece4a47ba3d671c3c38fc993cc4359c9202cab03effdc042e665a3bdf78f9256bcf602c2c71968da47827582c169be4f

  • SSDEEP

    1536:dsrOwc8OQPfxBSv6USIO0D5q32gtviqoB7P4WHpOv9EV7ozAWAbffS+pwq5FN:iZdRA6V30D5st36gvuoz4bffS7qN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14e743821bca405b534c74ba0bedaa93.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c8bcca16503edf66d5e7a176a289d5f3

    SHA1

    c605055187470ced3a70c09c82b407d14318ef3c

    SHA256

    808c214fac6e742ae2cc6b5c95329ec17e74b33e84f5274a1da5f185a3e6a4d3

    SHA512

    e9fc644d48e216de73903d3d8221bf33ef8fddb7fbb63f32a67019bda1091ab2faa020cba7513fa9accde504c2f02feff1d7f720ec7633eed8079f2fe48cc93d