Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 12:54

General

  • Target

    700c062ba5a46a5accd18fee9d892f31.pdf

  • Size

    35KB

  • MD5

    700c062ba5a46a5accd18fee9d892f31

  • SHA1

    186a1d54a480355864f8ecdb01e382e003ad83bc

  • SHA256

    b7d5ede4a757c8244cf825a5a9e6d92e7a8dda766b0a02fab87511c54fb9021f

  • SHA512

    2c2621593e71d90aeb1da8561b10fb9a96b73dbc316052a84c2894fd8ec36f878f307a2f0d9c4ef64ca1ba30aa4b8799f833572ee6f8c9529a4315600c8216bc

  • SSDEEP

    768:M8FvpgmzJ7DVvFscwZgphpLcNfinPKyczmD/y6E7p:MWRgmzJ7p+Z0hpefiyyfD/y6E7p

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\700c062ba5a46a5accd18fee9d892f31.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    146f2e111c302c88c1ff03196063c3a4

    SHA1

    130cb959aa47590325ef87b824f19017c0596e1a

    SHA256

    63c022b1af51d8c9924b3bbf2b4244479d96dddd8bb88ffc425b9f83c38e5d45

    SHA512

    a3bee8271e1d6a2aaf3a2a852892e04e56ef051d5133745d7a38f1448dbb40738459e5255edd896f20a58c6eb7628a448340c4fcf74ce38a6930b86c249a65ce