Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 22:27

General

  • Target

    059610109646c46a6290b1ec178735bd.pdf

  • Size

    71KB

  • MD5

    059610109646c46a6290b1ec178735bd

  • SHA1

    ee8634f3711b6359e6b62e640b0f9f9dc1ab0235

  • SHA256

    5c80b4944aeaa1671cf7f6745d7eb269d03c7a8c0e9a5cedc554cad0b12a1407

  • SHA512

    714ee947e74bb82dc98f27b942a414ee4ba8373a49b70defe05051a0b962d13bb2c625b2938cb7c2d3622d9ce8cea158da7236c625f863d1286f72acecf95e00

  • SSDEEP

    1536:K7gY9pH8T2KrdtJ3XVU9HUae1WwG0dQHu0RLyMMeX2wpBOuwUirqRdvq:HCHATJl0UlGQQHu0pyIBvOuwjj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\059610109646c46a6290b1ec178735bd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2956

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b7585c3acc4e315b592a45ebecccac64

          SHA1

          6b69d4db23411d725161ea7b74ff0fb37eb8942f

          SHA256

          68e23140d3f6f7191b707d98ebecd361632f3e403fff09e10a64ae5beb2f32ed

          SHA512

          c5828213c120e8c6206cb44e5c504c2ff0dea7d0b522823a8c9aa2922e629602e3dcbf01c99878636f26a430673c0b86ca25959ba3574d8613ec0527376bf595