Analysis

  • max time kernel
    117s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/12/2023, 21:18

General

  • Target

    f8d13b26ad877f792110040b81babe41.pdf

  • Size

    85KB

  • MD5

    f8d13b26ad877f792110040b81babe41

  • SHA1

    fb195f6ea7cf3889a3ca39c554e98415f96eb18c

  • SHA256

    dc98bf757e4f7ff2b075e5d4a739452721a2aab160e418eed87ec117c8269bc2

  • SHA512

    1b09e25f76f1a36be219d04667872bfdf7f8f5c8b45449fb461d41478ca30e9832edeb77f74fbab96e34ff1b65322b32b7891d020642bf5a5311b0303829fa02

  • SSDEEP

    1536:rll22/vxzW1YsUCpsoRX9oGGKYrqf9OOlEpdzbduUFfW8pOG1psArmGIWL/VrZKm:pBvGFx9oGQ+f9OO0zbd5F+GJ773KOlZD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f8d13b26ad877f792110040b81babe41.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e83c2f913c9486b143913252e0bc4f28

    SHA1

    852919ccbe4e19446acc2ae18ddc8208b435054d

    SHA256

    a7cbb5a5a43f7cc0657bf7b504e4f88adf63056520191d3c7a7edcedf99d239f

    SHA512

    47775da55b8414000173e5724b4459f29d4739745b9cd08251f39d8a26557b63e08495690044f8ba4e34624768d7f021f352c2739a1234abc7cf57381373d742