Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 13:24

General

  • Target

    2183f93b6591ad576d8ad429de0a53a5.pdf

  • Size

    86KB

  • MD5

    2183f93b6591ad576d8ad429de0a53a5

  • SHA1

    d110777aa37dbd1821e1c74b978100f1664a3dd8

  • SHA256

    c60666ca47ca1be4c74c6b2e28b8877e9e08ee08175dde6664df0e0ed24688d4

  • SHA512

    e378164d814d3a14a00b73907ab0465863281811a43004da9d9386369d6b587700f95d5bc9e58971f6c92df5e24222e45ac29212624212aa54389049939985bd

  • SSDEEP

    1536:qXJdLlAlPNkV+7oLZnopAhQH40+Xn24nqHxEP0HmJ0mat49IxeW37T58SWB:UZoPNkI0LZopfH4v24nXmmx9IxpT5m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2183f93b6591ad576d8ad429de0a53a5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3068

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4a877fee60e0899d2d51ce95fe3e6d85

          SHA1

          33493493c74e50d9a4db92c85a118e8a43a913c2

          SHA256

          65322bbcad34a7db24ff761d12212b83cb037ac6a3a47711137eba82b3a05332

          SHA512

          19e68cea52c45cff8f222f1f7581f1b3e773c201b2c56bc36c752cfc90eea927e9884b8083af4e28344cdd8b22688d8b6a17db5ec76338e51d296f7ca8c1f1d4