Analysis

  • max time kernel
    118s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 22:23

General

  • Target

    1e593b5c45a0aa20e88af6ffcf21832e.pdf

  • Size

    90KB

  • MD5

    1e593b5c45a0aa20e88af6ffcf21832e

  • SHA1

    17bc54184b7c19087473f6e4b8f8be83881bbb7e

  • SHA256

    7dc1159a7e76f97225eb530b3c5ad0edf24164cb15fbede9e0fa3f6dedff2589

  • SHA512

    1fe207aabddcc4f453e7de60dfa78b49d07c815b57f9a04f3120bd8613777b5c396df1a33f4e62165c38e5366ee42db3a914016dfcfd438912c85b1b01c235a3

  • SSDEEP

    1536:4Xj/pwJuBochI4guI1YUMwQgVJ82L/y80agFUS0OWa5Y1TOMGz8WspORKIG:ARwJumv4gEgVJ82LaTHFUdd1iLzXRs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1e593b5c45a0aa20e88af6ffcf21832e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2bf686d542a9d0f72545526ca41c8195

    SHA1

    f39e4021f6886d197cd13f30c50d417463a28c89

    SHA256

    0dd2cb038ad0c370d796792f16ac12e9732a0735b183bd7488fa35affdd182c4

    SHA512

    dc793ab3342552a32bff1a5aaf0cfa12c30edafa4c38bc9a5f93ee514c1251e68c7468ea5cb2e2af0e1f7e5a9113e63c65a84d49793ddedef1a5c8409cd5ed53