Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:39

General

  • Target

    103521449fc28cf441983fdb5be2eedc.pdf

  • Size

    83KB

  • MD5

    103521449fc28cf441983fdb5be2eedc

  • SHA1

    e3b5cbc126d8baa707276d526e6b7909df11b9a6

  • SHA256

    fb5935de10b573e141b8172f29ab5292918701cd6e3c8471e2e42ed041ee2ede

  • SHA512

    ec9884cece5e0537d0bae2615bf8336edf9fc550e2100e0fd9ef5dd93e680bf0bb3aab17c34960fd1dbf2ed6ef85c978a4a6974075203061c439c201be1d02bc

  • SSDEEP

    1536:ZcaeUo+7JSlLMYfcyp36gv7jdGPdCd7QFLHfgtdAYWPhASWvfY1wkzJ1WCpOVa/q:yFHAG7jdGPdCd7WLHfwlHC9CVaC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\103521449fc28cf441983fdb5be2eedc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2268

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f953fbe29df25fc66d6835e64e3d99a2

          SHA1

          0988e28f1d67860ed301ed04588c07e0f2074d3d

          SHA256

          094decd3f27966dfde6776cc68f9f36d5365d80ec227a5fc9d6104208c9baca8

          SHA512

          f697d3bfac65959a190ffd7ec972c36046b19e127498c1a013cce891df9d0b889b2f3d007f549d055060308b98559a4361645486fd34dfdd752e7529b0b04af2