Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 06:26

General

  • Target

    110af8ed5544b4e20a1d1d9609bfd212.pdf

  • Size

    77KB

  • MD5

    110af8ed5544b4e20a1d1d9609bfd212

  • SHA1

    691a080cfa81adb00b924b99ba0b7de1f4749d1d

  • SHA256

    6d4dea4707e61b3fd10e8c8352c8ee8988b889bc9c02e03f19bdb0e8118faa80

  • SHA512

    64f261f3f92e9f4bdca3388fac4264b657735b910c05fc731c20882c22fea3ad746c43db6ad83d6db5838d9b0e59e5506c014b48e2090ae4de380862de24e2a5

  • SSDEEP

    1536:Kh9PZY3PvnwILNt5r1x3rjpcLWWaCcuAc59SzRg1XrDsvg3kj3Es:wPZCPvwIB1x3ZcaCoW92G7Dso3Qr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\110af8ed5544b4e20a1d1d9609bfd212.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a37ca5799681d16dacb3ded87302a1e2

    SHA1

    581ceb36bab907fb936a5b7034a6e317ae5605dc

    SHA256

    b4ababdb15675f0b753dc10db53a2dd991fb54b3f34f361ef7fc04d84df4576e

    SHA512

    57d36c6c8beaabb6268eba3d4839b3ea3379238d22e3e970876de0ef208c59c1d65203207087b399e5792eacb6a9e94301d15764ab7ab9a5e93cc59941e57ab5