Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 06:51

General

  • Target

    117a6c18def5a62ffc9686e9507ebde3.pdf

  • Size

    87KB

  • MD5

    117a6c18def5a62ffc9686e9507ebde3

  • SHA1

    8aa80e989fa8ba9506fbfd160fd2395dbe0c31f6

  • SHA256

    1a99631eebb55247ce0f7ecc635a3732ca6185477cb1031c5cd9d992d4e609ef

  • SHA512

    695467661aedeafac625664f47e65283c7b082426448f511ad43783acad52e545f8201d91a63a3271b8f6fd8eba262c0bf1815abc7fdb2574defcf63d674bdaf

  • SSDEEP

    1536:AFZTbVGhLRv0OocB9HVPudA3vcaI/UWOpOwrKWG80cFTHBdNm2l:qTbVGRRv0OocB9H9iA3vcx/xwrMcFTHp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\117a6c18def5a62ffc9686e9507ebde3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0809aa42b60825ccb2092f0ebed91610

    SHA1

    76f16a6336cb98fb028036242329c894f1829775

    SHA256

    2c7d46db5af8e0f0ef775462377b45f597ae3dcbdf481872a6c485c9c94aaa8e

    SHA512

    14eb81e1f8cd97440a8643fecb8ba91060594e7f991264f4dd080151de4a54e5d22a53581a9065439e3c08868c0df0baaef05695910b61cd611649bd10d4db8f