Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 12:10

General

  • Target

    1d3d08e84c0722276f8279ccc99ea9c9.pdf

  • Size

    87KB

  • MD5

    1d3d08e84c0722276f8279ccc99ea9c9

  • SHA1

    9bb7767f78f947bba8f7d0479795eae47aa2aca4

  • SHA256

    a3d5f9cfb2163b59bdd7fcff9c7351e233d311cfe4b20808a7698f1765b85a91

  • SHA512

    2db5e3f72b56c1ffa437e3b16954405c6a5d03714ce650a19a5aa143216c31e2646415b027decf39a6df1889b868505ecef7edb3f71c0e4d54e6d313e532992a

  • SSDEEP

    1536:M/Lpz1R7HPCVvIFx8ni1rqtLxqj6Bb2C6XVUSQqW3ywEyUrWQpOC9B9:+Lh1R7HPCVgFxrqtLxjCC6XmtEyUWCJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1d3d08e84c0722276f8279ccc99ea9c9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    41d63a6f2782b047621aa08c4e88baf8

    SHA1

    fc4f057220085f2ed72650f61d7b6ea80d991a4e

    SHA256

    f6c51adec8884796b98e15027df17a42ca7617c1a925b47a64ca8fa653132fc5

    SHA512

    734d6d1f6c863326e896e6a784095ff12f1115b967d11505fe40b8aa8bd4f98e9b8f22d5091b4f33055e9311080f2b2dc31a1c8139496e10f84a679799b4c650