Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 07:07

General

  • Target

    11c20bd240eb65f302d68f1ebea3390b.pdf

  • Size

    102KB

  • MD5

    11c20bd240eb65f302d68f1ebea3390b

  • SHA1

    38b3c5abb0bd9c9ddd41b97e4856da8311ac6120

  • SHA256

    a53f223165c741a72728e63feaa336558c97b65fcdb907e790d9a19c1097f73d

  • SHA512

    63d0149c00d0c73bcbd25a48f3cd08fdb6d7c5ceca9b6616833daa822ba355cb60f0a69aaca024b017e45cbfe39afce0b662d4e3e1638fe476fc6ec5e5e2a66a

  • SSDEEP

    1536:97vF0EomqAE4XUR2VzUGmTu8so6IV3/Ogmmw0yE6oWixfqAtjyceSLWQpOCfUbbL:PNDCEHmyzMOgm3odj8S2CS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11c20bd240eb65f302d68f1ebea3390b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ea1b6fe66ddf90c799cac73ac9d339e7

    SHA1

    fb0601d15212f8825daf7718f4027f1ccb6c8a41

    SHA256

    c80290b6edbcb7fe0b00208760ba2f5e6df5bac361f7e5200cf0f80c2977fe66

    SHA512

    a4ac9c8c76485ae1da6249b1eeb1bd11f3520f6d7aac8b4cbebb352aa0a7503e783c8def5d3971f42b5a6435c1480f3567a381004a8e47d81a609efcfab9d41a