Analysis

  • max time kernel
    131s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 22:33

General

  • Target

    1e90e215ddc31c67849e01b1fca1b06e.pdf

  • Size

    82KB

  • MD5

    1e90e215ddc31c67849e01b1fca1b06e

  • SHA1

    7808768e5faff6916c2210ceef3ac4fe7becfde3

  • SHA256

    847c9aa07b85be81ccf17217d0c5d2acff085f97075e7172f36a2df92daa45d1

  • SHA512

    a9ad765bcb180d4e8aa372d8c191f02624df9f9ea771afb09b264b2bcd4f83ee10efa9e212761bb86e1c994bad1112d8d2a19b3153dc27105ab39f546ec3a026

  • SSDEEP

    1536:OwYkbGV6dr0tuQhgDfzjPm7u/rKcjtDK/T0WspOLFQ4xS+a/WqcQqlC5J+U8:MkyV6F0tuSgzjOunjEzLFHxShP2C5Jq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1e90e215ddc31c67849e01b1fca1b06e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3001dc9fc54922af14324a302fd1a3d5

    SHA1

    c12a462c91f3f42ef7409eae77e621492ef15884

    SHA256

    75d3cfacc41e663792617075ba37fa55ea5b2f48dd4dd05f24ce34d43bea93cd

    SHA512

    8353078c4563bd2bac01e75fd68a4c3fd9cdfd289afed83bc45001ec1abf44148a0cb533d7cbaf0f705775e8a0ff7e9f2902ba7d98026c19dad2fa6bdd01e667