Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 17:20

General

  • Target

    306d1b3c8c1c786ccfb20eee12d71ad1.pdf

  • Size

    77KB

  • MD5

    306d1b3c8c1c786ccfb20eee12d71ad1

  • SHA1

    6fe7221d770ba2b39568ab67efdb483f1816979b

  • SHA256

    0915be17a479cef0f05e836c47b01b707bedcd9a1005b91f41acffff64f9a777

  • SHA512

    48d32c1e108c3f4fa93460f4aa98b0548525f1a295b7562ffe3664c6247c0667c29c65a1d0355f3d687d4715f3a6067609f45f9ad94821fc23dadc5dd4a55b66

  • SSDEEP

    1536:apJC+izvuPlBcny7q/pgaCn0dxKK0dL9ISEUSu1keVyK1bKep:N70lB7q/yaC1K0cSq+vb1bH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\306d1b3c8c1c786ccfb20eee12d71ad1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7acead1ef9a3b14a66d0bd3dd72c33ad

    SHA1

    02a9d80fc7df8c102c78e06565da6056059f33bd

    SHA256

    ef147d28c19466fb6ae480d439a5e367154f51cb2de17d0baee99f02777f29bb

    SHA512

    9d9b9be01e196efea41d87cf3470cfb2f78ebbe14ad924f3db55e71608efed4fd32b6b219f176026b04669e897443c179b59b874cab99d5fff65e1f49787f8de