Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 20:28

General

  • Target

    031d33cdf5eb4b553101bfa14b8df959.pdf

  • Size

    81KB

  • MD5

    031d33cdf5eb4b553101bfa14b8df959

  • SHA1

    2cd22076f1fa0157d322b0b86495276bdcd7a5f1

  • SHA256

    18861b13c24f7b81f5038d0d1f3c2096027e0fbeb9458e861fb16fb8ae1af91a

  • SHA512

    d6ccaa54a61b5480522a7f8e4f7adf05be6e4ad91bb9b64b77a7cf1acb676940d6b752070363304eed2f1b0cdeaf0e1d10292326cd75411999ed8aeaccf2bdba

  • SSDEEP

    1536:ibPv1CYWK8yIAddJRZZaD4m98q3ToVWrhyzOWrgUcVvB2W6pOu20Eh0ohF:EPv0DK8zAdXwJZDLNAgltBzu20Eh0w

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\031d33cdf5eb4b553101bfa14b8df959.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a0ad4ae7b66808d5b8508ab004e41986

    SHA1

    a2e8c50bb550333699d0eac14ed0f607fb9eb3f2

    SHA256

    463b825fd5ee65d2afe8bf849bd55428dccc9171d3233aa2f226ae93afb31764

    SHA512

    244f6d123b8ebedf9be66b04d3f2c5fcb1b3c0234b2b9adcfaa89694c9609377486305a8a84ccff46dafb2f99b7a3ab2d571df50c5c864d381d54dc506383e44