Analysis

  • max time kernel
    227s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    28/12/2023, 20:32

General

  • Target

    f62416225fad2cb2731a84faeb38aef2.pdf

  • Size

    84KB

  • MD5

    f62416225fad2cb2731a84faeb38aef2

  • SHA1

    b29ccbe730d327ff41334ceb3f878945a3f96ecf

  • SHA256

    0c5e444f8f41cf1a7f0cafca1c0f377a5986f6977ac5ef7db99a3a83e5c36575

  • SHA512

    2285d092a340fc75000295b7acc82715d251c26e48c36d3277c63bfa9697887f12c89b474f0a04d3d8f3e5bc279bd3cadc0d9a7c18da4e05f1f0fda9ece6f7a8

  • SSDEEP

    1536:cmlP8021rMtPiZP+59tVLyKJlPFy+Wxe9KF/9HdW6pOu2g2KVqBGG:sHrKiZG59GKbt9YlHuu2jV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f62416225fad2cb2731a84faeb38aef2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9becf752c5bd683817da4826d9df5753

    SHA1

    52ad07221291301e596aa373c2e4b19a013039f4

    SHA256

    671e2d9308eb2d9381fb9ca204fe2262e5e122ecb2e9b62ac8eacd36455e219b

    SHA512

    7b059662f290beee4fc32fbe779599a97ae495fc512ae295ec915373703b5ab7c951f71d566dd20a2d455fd513f4ce18ea119b9820e8eea036eeb97edaa0a703