Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 11:28

General

  • Target

    1acabdc2cebfb178373d6a3040e460fb.pdf

  • Size

    85KB

  • MD5

    1acabdc2cebfb178373d6a3040e460fb

  • SHA1

    feff6f49b31ea90c0b80d80150835f46dbc4b2e2

  • SHA256

    fc1e7ef737fba7b50e85a435364a753248cf136133aeb377f3ddb7c0485aff7a

  • SHA512

    4b8595b7b83c209819cf5bbf9744691e0f2334595f5d1749ec3a4b804caa5d01d9d84ff865c8a3005eca2cc2b3910d43b892272a48edcc68ed0530f22574eeeb

  • SSDEEP

    1536:2iM9dswUrcAsE96V8tgaY/h04muyTe9Xz2hgqq9Wc3KUCW6pOu2RibB54u4ECT:M/szMWjeaYgyJzYgqI3vvu2RsB6J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1acabdc2cebfb178373d6a3040e460fb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    04b633250d5a6c20e64e4559d41195e2

    SHA1

    fbbaa4e45b61695828a7db3379de9b4022221484

    SHA256

    665dc7db9c504ddd0649cf8bee477908c4bb14f90d618609f7e69e4b279a21d9

    SHA512

    7b7e0ab90ef59f444c62f82c9e6736b7343b6abbd631a533086660e1463538226a7d03916b80e1ffee1e89c50e82de9e1cd477860b3360191b5226d0ccb2b923