Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 06:46

General

  • Target

    1163c23ecd085f42297afe4421b1b1a1.pdf

  • Size

    86KB

  • MD5

    1163c23ecd085f42297afe4421b1b1a1

  • SHA1

    345482a99cefa26cdd74541140f4ab66fc07fd44

  • SHA256

    7619213d4e4c0bbc7101cf1b882e882b9dbf642f1da562429ddf8a30d49bdb47

  • SHA512

    448e66d58c0111146e2045ed2f50c7c129df27bd30bf8a6a9c9cb68c0571937625e9a32017cbf3959fe41c77d2df95913091717cd5d34e88e0d8f0abffedbfb2

  • SSDEEP

    1536:we6tLg7TMHiAlDWQq8x1MOOA+wLZs+IQPM6WnxsVvFdW8pO7akk4:B6tLKsiABWY1MOOANIfjsVvFc7/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1163c23ecd085f42297afe4421b1b1a1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1288

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          85c04f32fe6d139d533787dc2462c65b

          SHA1

          fd0908ed0284a208f88c48d33d2eaf6e63239f4a

          SHA256

          1463655b2bf72f53c8cf11cc84afefc0e0d6e64ae99ec585ff3186cadea8c096

          SHA512

          773b47659494d9f31effe693acd81a64d78271007b2d0140aa3f9fca73bcae07fc2902824d9329128d3c77d666e7c02bfc0f81c1bf36934abc2d7250ed242bfd