Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 08:09

General

  • Target

    130c42afd90807628dd051ffd92ccf7a.pdf

  • Size

    82KB

  • MD5

    130c42afd90807628dd051ffd92ccf7a

  • SHA1

    330861037425e02eb9bccf62945ca925ce68bf77

  • SHA256

    1bf7d5431eeb53c3360721a6f5efccfdc585dc89d4464bc9b3963e6170649f39

  • SHA512

    166fe5555d68e37419ba314d85310ce2afbb8d93c46f118f43f1e08a0344c71d4ca2833ffab3016065dcc7cac5422928ddce77eb257512d43a0859c5110b4b3e

  • SSDEEP

    1536:Oh2xHFNBrf2n+huQ2L90mmARvTwMIDmlo1qPO53l2ZWapOtQHWgQxam5An51IyD:y2x6JLOmmwT1IOYqMA2tQAtc1t

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\130c42afd90807628dd051ffd92ccf7a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7fb94460350ea0e8a5bbf07e033647a0

    SHA1

    60995e9a8355d0005e642dc43c52bf7561666a0c

    SHA256

    1a458d4c019d7657f750f1148f200e193530647efa124e7ecf21bfb1b5d2fd2e

    SHA512

    cc552cc259b638d875b0dd5e1282a8d02a02f91649b20eea636f2ae7a248f07ae80a4fd707032f1b49e05f24e71a9675a765efbe7c9872a3d5e3d1e3083fcef8