Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 23:07

General

  • Target

    1f71d8115ca0d884ebf56060c2723cad.pdf

  • Size

    35KB

  • MD5

    1f71d8115ca0d884ebf56060c2723cad

  • SHA1

    09ac63521349525b83bfdf60773cac041092ece2

  • SHA256

    2d655dd0000280b3cd72ba376a49abbc2bd87570268b2db2c27754a0761ab9cd

  • SHA512

    fdab8c3f055cc747d9a515e4c8a42f9dfafe2501143f1175b5225d613ab7f7672a89d17df79282767c1897f44554c460eb22eebdff6ac4fab2bd66c0dd09add4

  • SSDEEP

    768:ikzCRQhss29CT/LGsVBrunEN7cQVdQA6wCR1O9IftWUPyAMnY1vqUXHrV5wBPV3e:ikzCRQes29CnGsV5EEN7cQVdQAuOmftH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1f71d8115ca0d884ebf56060c2723cad.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0a62d7843af976bd916db2b041eaeaf2

    SHA1

    2802a6f118090b65b589b2a0f8fc9dab172e08b2

    SHA256

    001cc02bd37f6a55190e145326c2720ce21e3a5736973cbcfd7ff29e5c8e61e6

    SHA512

    c3da2a0525fe246854c11452bd7d96b9e52f09756d259a676c30f61123c3a15b39b0c7d9008929a408952bba0ad1daed6b580dd7a046207c91c59c4d23e809ff