Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 11:05

General

  • Target

    698559d651f5cba9fca50aefef7f7bcd.pdf

  • Size

    117KB

  • MD5

    698559d651f5cba9fca50aefef7f7bcd

  • SHA1

    785ea3820953651d93f762f9947273ec22c22371

  • SHA256

    c5f8582da2a0bcf52b4e8282b48703dea291765329b470023e88964bc25e9e48

  • SHA512

    477d90a8ba4d1854d7158b2e51866004f9a495792987142cd35721282ae2bd4a58c57dfa6a0ffa535e3ffe0f0a73a14d8d4cb999df453ec01aac5300881eba22

  • SSDEEP

    1536:xGXeV1BqgaVCEFQNhRec5+38tlv0FF41IYSqnO5r8XuWMsrVEQ4EglWOpOwrrvyd:AXQN3hRf5plv0F+BSp8XRMEgiwrzyi8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\698559d651f5cba9fca50aefef7f7bcd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9b762a1be558c09fd3d98ac226a4ab83

    SHA1

    b40b251cda789b05c6c4a8f7800b27f243ffbd80

    SHA256

    65fd74b67d8006006827b31e67221a9a605a7dbab6d6d182f012a114e874453f

    SHA512

    7607a875f91179d8c85b10c1a6d1724da2830898d6a75b89e683e7405f6d7afc46773e8e541389b8299d70640a8d5f535002de3aee752cb13935fa3e81500e35