Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 06:52

General

  • Target

    118064e99b5a485a9d7dcb68a729283a.pdf

  • Size

    93KB

  • MD5

    118064e99b5a485a9d7dcb68a729283a

  • SHA1

    00b20f11ae43cba271cf983f40f33ec2e12621d3

  • SHA256

    38fe1f3865eff28f013c8ee8b5eae654c774ca38dc19a67ad8d177348afbe4c6

  • SHA512

    a31c622b73bdfeade2ddd55fba38073d9d050226e532fe8e1a1a4b9b741af1b01d931a4d65ca577d401bad6eb3b287665d8c30651b73c83507f3d7beece3f9ec

  • SSDEEP

    1536:8uEuMQrMdm8TSxM+UlKWysCXh/uzfZDVS/+bSqkspKObdPWypOlWWxTTTF6Xs/fT:7wQJ8TWe4W8XRuzfSuSkClDnZ6c/ht3D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\118064e99b5a485a9d7dcb68a729283a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2988

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e900a9c00bc4046b0b82abb2b691fbc0

          SHA1

          69b443ca5c2ca4b9898fc00fa087c220547202c3

          SHA256

          0a661cb733e1d736c75002edd4c43991b5c62b02e11f619ce7222c3e80383112

          SHA512

          1570d7a3bf871fee6a0a090cb81dd22fe41adad8a84f87a308ae8f6961177ea64808074aa1aa30531c7f79a903a8e4e6a3126d51e36a587edd65197b0e992294