Analysis

  • max time kernel
    141s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 21:50

General

  • Target

    04d9c67190550f1efe36cafa876e5636.pdf

  • Size

    78KB

  • MD5

    04d9c67190550f1efe36cafa876e5636

  • SHA1

    2b8649110d3adc8a5ecee60dc31de74cd577c533

  • SHA256

    bd727e63a30b4e3b3b8c686902417448a35887b39814f13ba623722219d5073e

  • SHA512

    000919e356e9b9defd9f60b940af5ee0fa56f43fe17f00ec61e9d70ae7f0d7daa14e6f44b31b1c5c46494c50763664935ee48ede466cd45e2b798cf9e34110fe

  • SSDEEP

    1536:uzGmhb+v3mGOJwTfQYNlH6QuwKu4HI5fA+mwnL3WapOtQHWiFCMJT6:bv3NswTImxP4HI1MwLYtQxFCMo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\04d9c67190550f1efe36cafa876e5636.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2788

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2cedcb271e0c3a4c404b24406027a772

    SHA1

    82c0cac889886e1393f98e64fd2b7f87f978bed1

    SHA256

    52d2a020ce1812992d15f60da651422bd30a47ab42f1f330b660eae3f505e804

    SHA512

    a442f5497bc9a0f090bb0931868650ab34961b408fa3beb8014633124db1da844f85892bec62b5fab41dea865c2c2f7ab392d27a0f57375401cb5f4c3fa069c7