Analysis

  • max time kernel
    123s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 00:00

General

  • Target

    44d7dd8712695958987d888b195f5188.pdf

  • Size

    62KB

  • MD5

    44d7dd8712695958987d888b195f5188

  • SHA1

    1d37482050af195340a0f954051749e692e8800c

  • SHA256

    4b2cdfdbf7917b386157ee1a5621ad295c884a30cc9c75940fc9a84738440530

  • SHA512

    9b10c04264a93735787e39f27c54de57f77ace8f0fa6caee8fb122a0d55c1ff5ed1c1493275868ddcf108ec2c4a633b97139818d9dd562522900478b76267388

  • SSDEEP

    1536:YGFEemENAoowLBicPn1FQ4RcS5bAVOtBltIcNwK6RvRcWlPAuzr/q:1FEem6AcLBicd6al5bYOtBltvNwvR5cr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\44d7dd8712695958987d888b195f5188.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7adc3bb46787e322c2e3599a185f7d17

    SHA1

    9187747f10b710e03417d3176b67364db9bbb805

    SHA256

    8502bc8c00d8a031290ea4d560ea50231b5296931dec3507acade2a545d89432

    SHA512

    dac9fb31c6f9f7b4e2208ac6e9f91bf1f708dffed1d29c11230b0dcc0925d67169b97115b2b54bc0937a3ba4ed641dd51b3fb86cf7778e813535db0f4e167457