Analysis

  • max time kernel
    149s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 11:02

General

  • Target

    193cb2097ef97c35ca737a7157f9fcb3.pdf

  • Size

    78KB

  • MD5

    193cb2097ef97c35ca737a7157f9fcb3

  • SHA1

    bb8dde1373d9149d23e208697b2815684899d4b6

  • SHA256

    d20a35a5cdf4698ccbce5b23292b714d1b9902e5ed7f617bb4696f0c813c72e9

  • SHA512

    b44dd094704b8fafb5613f03a17168c077e91ca78192e58ab88d86cdc2d2061f46181deaea125322939c36924bb530ac011e5ec76eea83ae0ec888444eeeb862

  • SSDEEP

    1536:g1cU9dsR432Nfe7dyhG3RUBsSb+UqqyNpSXIWqnPY6d4ibgVW8pO7iQoi:McQd332Nfe7dysYx+UleCv6mibgU7h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\193cb2097ef97c35ca737a7157f9fcb3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2f76dfb8bb9c0c67a63b1904be69546d

    SHA1

    3609aea846765c2477abcea34e2f1f5f2a107c2e

    SHA256

    19251553faaa8b8287f1533b3822229178158cf4ac2fe03875ff906cc43d8b2d

    SHA512

    19d1ce61396ca695895c268cd42a4386d5c0b2ad1224b14dbb816a46af4cf113a6c71ae64a7b1e143e618cbfcedc8234c74c6b94e49bbdf0a31d0e9fac31d25c