Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 19:21

General

  • Target

    018e55aefa2887e305076e68b0c12ed6.pdf

  • Size

    86KB

  • MD5

    018e55aefa2887e305076e68b0c12ed6

  • SHA1

    6c2eccaaa3ec0fc320059e8a950ed8bc38f8e4ef

  • SHA256

    6c62cfccaa3505828fd37eb7ea8d710d5112aedf5c0d13f8141f0457f0bc8734

  • SHA512

    ee87d0025b132e32367bdf5cabf1d8ed1a041885038b97c3c919f5719991db208f407e7d9129a6c305e7be6a1e0406ce61d8a5c64272a103e14de344588c3a13

  • SSDEEP

    1536:3D+5NzL6Wg1hITfe3PeyURp2FhJL97YxAUPS6iLukQUfEGEgDWxCgf2WOW8pO7SP:C/6vsfAgRkFhJL97Yx/PS7ukQcEGEgqg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\018e55aefa2887e305076e68b0c12ed6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    95d3f8cde0f188a84139d25d427cb9b3

    SHA1

    81c1f94d4e05019c3cc9fc39169473e4fbca713c

    SHA256

    33833f2f179126447619632a550daaf09656d99da970958fd1f942c4b344c048

    SHA512

    e5e9be55b46d41c3420779f353785a229f52f67aa0ccdb7bf56c6ac57c83fea6dbd4d696ebfe56c8ac010731fa9286d5b88b1c151ec69cb3442400dabfc9105d