Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:33

General

  • Target

    1015e67a37f17594be0afd217409ffcf.pdf

  • Size

    84KB

  • MD5

    1015e67a37f17594be0afd217409ffcf

  • SHA1

    3e7d1be49d0d51df953f2f11851690075264290b

  • SHA256

    81613d1ba766da3dd78e80ee084ba9b02c2ea467633973e252ccdd474bb6256c

  • SHA512

    673fafc1aeb0fb37020d927cd9350f1644f22ff0d4a3577381ce3813fded85699de93628143118b01a9603f6cee40e2db7d6d634e26aed4754c75851b6dc49b9

  • SSDEEP

    1536:Uac1++ve5LdbN7xBNCBboV3D5v73ehu2F3gtD9FzCDj1csdiYiWwpOS9WX+Lc652:WidbN7x+BmV3eh1i9FzYj1PdiYVSpLPU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1015e67a37f17594be0afd217409ffcf.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ce839fea6cda2a1a6b9ef9a82f971452

    SHA1

    e8489fbfa12df5345a80ce8982db96bc3a840561

    SHA256

    b6bf6a791a05acd6a0ef0324245667c71d0702b18afef365974df616f643d9e2

    SHA512

    7fc28a8eadbd798db7e5cc1a4a33c7e4190bb5eccacf50375f4846ecfc66d3a69766773d6b408d22c3ccc1412f1360dff41c1b192454c27142715d5bd09055ed