Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 18:02

General

  • Target

    33032e75b7ba4a6d637fa3b70b728711.pdf

  • Size

    84KB

  • MD5

    33032e75b7ba4a6d637fa3b70b728711

  • SHA1

    254db51c8383df4e04d33b7a8edad156e3b929c8

  • SHA256

    581ae82fd328b7c3a3c217645b1a701a99e5369650aa3acb7bb2c6c1d3b7b85a

  • SHA512

    7c42a116c939289d4ebeb93a560dc607fa7922b5f2bfad6ded8d7b5d5b7aa47c674e56c522db58e17084a669c0765d767bfca5442bebd5520d1ea8acf5dc6d71

  • SSDEEP

    1536:cWAGeE8U/Hipqqlt4tNMze4oOLKC7FAUWAWexQaPWCpOVitWq60ZvxS:xA5UKpv4t6ze4oGZAUWo4VitWBig

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33032e75b7ba4a6d637fa3b70b728711.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3040

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f53d51cb14dc7c786a5a09375f3e0597

          SHA1

          b1266df72987bcc7746064e60a941259eac4139e

          SHA256

          0e916b818cd5ed95737f93701dc1934c9e551cd301e58ef2fdae19a9537cbd5f

          SHA512

          2690660abec9fed762d762ec76cc7fcb943672df0e46e4d6867ba2d4acea109d55b23bbdd76e96f3c717a9f694c4b3eef21144471ca27c83832476da1e09bf78