Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 17:43

General

  • Target

    31d0e286d06f592df82cbec492e3b75e.pdf

  • Size

    88KB

  • MD5

    31d0e286d06f592df82cbec492e3b75e

  • SHA1

    b259e3454fa834fe692b2da27050ec39df7c3326

  • SHA256

    fef1c88e32750b6907d82a24f7b8e74e95039ed668340a7dbde6c999cebc03f8

  • SHA512

    ce7176bc2d88370c757c5857a790fcb2e8dc8b524d9ce2ee3a43295d3ccd18faad0ea9ffe12dbf422d137c63ac4f7c4925b99a9431d747eb6f93e2d2731a6e32

  • SSDEEP

    1536:EnZd8D+M2Kh6jbAuWQUqH0GN4PBKPRmzWcMyvVrwSqjUY/OTFWUpO7qYZ:aZd8iMP6jQqH3yyRmGZSqjUY/OM71

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\31d0e286d06f592df82cbec492e3b75e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1052

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6fbb7d742424a20fe1de3fab6e79aa0c

          SHA1

          ad9ebc17fa50d8dab22dd109aa01c4849e6708d3

          SHA256

          73b2e1a85c64d392f935bca0298cc564ca10217bce2f03854ada920ad9c6e893

          SHA512

          84074372288048ea0304af6b98087d663e76f0c63fdec129178e21932c22ed9d175f37310c81b09776fa76d96045783de48c2d0b9525c50ab66ef1763b9a65aa