Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 06:53

General

  • Target

    118504754f12ba445ddfc98989b1e17b.pdf

  • Size

    78KB

  • MD5

    118504754f12ba445ddfc98989b1e17b

  • SHA1

    c69f78a305729390a5d59c4ed96d8abf1fe789e4

  • SHA256

    815ae03bf2f215e850b2ff92bebca41c46a5772540b47a7980487ec7c78b91ae

  • SHA512

    0555fce9ec011109978608355182c66ff41621ca5ce03187e4bffe9fc1825a82026b3dd170d38869d4018f1356211529964e03016100d2d0f30f8cd8cf973a40

  • SSDEEP

    1536:RfzcTbV+lKtwvFTbrsHozq+Iqfm3jlNs7i00Uw+O3OCWTUq+Qd7AtxOHExu:l+bpwxOALIqfmTnsOZUbihcU5e7SOHD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\118504754f12ba445ddfc98989b1e17b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3eaf3eed4227639d9dcc8e0b45119bb7

    SHA1

    9055ffefb5cb68264e7a034c3db220b84a113a6c

    SHA256

    e3ed5758b41bba3c4153e7bc2567f68a1b372257825c353458df0b1f1a26e32d

    SHA512

    ba3e797bcd7067a69178a85381fd8952e50dcec73adf430e9ea0539fcfb85e42a97cf1fd34c29890574c0dfc00a0bba2bf807836a45e2c53b971792c7fc3b955