Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 07:19

General

  • Target

    11f83dfab12a3a951380fa4bad7b2932.pdf

  • Size

    82KB

  • MD5

    11f83dfab12a3a951380fa4bad7b2932

  • SHA1

    16acde776663839c17a4dfd7411081592f6bde52

  • SHA256

    d7d0085c25cae3d85bf9320ebf2466ff86616b0814052728a6a73ede2cdf8482

  • SHA512

    e0202b9fb7d93b9bb638372306f6ea0100dc7162e0cfa08b0306c16cb40d92113f129a5404938b0b0717dd785d3b8d624ddc4c8850e34172f496cfeae1584b10

  • SSDEEP

    1536:E4m1KOt9rf4TwsOpIWbnw0ay+bzUjt9M7Itp6kOdGLFzk2U5nvfd:Mlt+wsOWoPayvtcdqFQ15n9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11f83dfab12a3a951380fa4bad7b2932.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1140

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1fbbb3a1152c2fdd6696cb2cb89ad7f4

          SHA1

          d213738f52391c995f5c4c9498bd0f70635695d6

          SHA256

          cb5f669247fc894c273f0032310df4d1cf4b8d377ee5b3e2321d48c474f16ecb

          SHA512

          fb25e44dd6bb086fe47b29c55d93cd24e86048c6cf4533fa9caefbfb095c08785abf84e903f3a0d96fe47ad6ae420ceaf5728801b02c6043156a9ba9b1dd9587