Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 17:18

General

  • Target

    304710f02a39362f47a7e4f26210c054.pdf

  • Size

    69KB

  • MD5

    304710f02a39362f47a7e4f26210c054

  • SHA1

    7b92101f1fe6722b77f7e9870f020e0bd3df5320

  • SHA256

    3d37a13331dcb39ad687f04a1370c1bc7172e83f00ccd426c52cfc6ed3cc6f18

  • SHA512

    ecfaf1ed8241901de049275d32a9b22c9aabcc296f4d8e6eafbd96a4cbaed9a48b8b4285511a9da92352c4ee04acb2e3d3c7224e3ff217f0aff7d03844b2f9a2

  • SSDEEP

    1536:imYORDoPkk3WZl5E6G1qrCfGtPSRMQskqtOMBRT+g6t:Z/8PkkGKYCfGtPSHstOMBRT+7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\304710f02a39362f47a7e4f26210c054.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2cec1bb8edd7d5a3bd17b678834a14e2

    SHA1

    a5c02f0c9371b40a67ecb09ae6c94ac558e391b5

    SHA256

    8bfdb4683d918942d770b933d154996a0f2fbd4fa3c1354ca0ba827dfbd12607

    SHA512

    6f9dbaf64d95dc61dad59bf88888377ce113706cc8782929f5b323c1297f079cc25bd6893e59bbc14dab7c4882e0130ad0e58f6cf32231d9a6db60ba08c9193b