Analysis

  • max time kernel
    214s
  • max time network
    42s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 23:15

General

  • Target

    1faef7c89be39124fc91903a4b096f92.pdf

  • Size

    86KB

  • MD5

    1faef7c89be39124fc91903a4b096f92

  • SHA1

    41210c379370f7df6629433a7b3c473325da8731

  • SHA256

    6c9b0ee61c78b68d3dbc33b9df902fdabc1f64e06e02e48cff3f087dd88c230e

  • SHA512

    ebe04a248a0f7d63956edfbf2e67a1be91cabf2ced952dae0a4720224a2d59423d7b5d0036387aae843165e58950e339951aa4eb86b2e35567d1c02fcd68d333

  • SSDEEP

    1536:6B5rXZjg5WVCeZtqw8KGqKQnf9TIAY/Tibg1Hh+Ml7rBgkStvadDrAOZ1rVh1WBM:Wr2ReZH8K/nf9TjL2rGvtihrAAVKB1Fs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1faef7c89be39124fc91903a4b096f92.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1836

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          060a33e2d2415b90fe2b631d4d161066

          SHA1

          31daa5e6176751f7f0fb4b055a9dfb43a01e8d04

          SHA256

          7c2f11550a8b4d59a77c7e01db7389810929798dfd086c26e075fc7db00f3ea5

          SHA512

          2c59829e09e60c5cc81c67115c0d7d9ef0db3dd5e175e74f8168bb6c2587cade039e26e633f9bf9f8e03a201705d02e041f040d9494f59784cb8de8f54e671ff