Analysis

  • max time kernel
    124s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 09:10

General

  • Target

    628b4f36062946c601e15910869c6349.pdf

  • Size

    85KB

  • MD5

    628b4f36062946c601e15910869c6349

  • SHA1

    29daaf90268c21c348a9d17a68c6df5f02e114b5

  • SHA256

    3ce272531a86e9943ef1e1d11c271b622fadf9f2ea2d1f2bb6944058d3502ef2

  • SHA512

    c2d71ae2ba5a92398534b7c0551fbf7fa6fa89fc662ba83a69a5ab64a69788a8c28c183af108b0672b964e3836e734649447e210afcc88ba965c2d0754a5cab0

  • SSDEEP

    1536:rLpFPbtkBW1fEnGZugQ2JgE3JqYCrcf/IRRwnm/W2C+YcZWbpONIRHsByP:xlboW6n7gQ2JgEIYUc4RRw8fYcbNpE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\628b4f36062946c601e15910869c6349.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2700

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a97bf67512f11908b8789d5d3b8aa823

          SHA1

          1fdec1727cb878aa2893410787abfba2178704eb

          SHA256

          81597b5d90b025398ce6998e0122714867fef840487673a95102b1f85182a8cc

          SHA512

          f2141812add793d1b0d63094c7fff3be349c995db38000fd91854a5d6ec9601e400cbb57f92cc595cc7ed7d1f096e5e1187356ff5ca788653b7b073849db435d