Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 07:48

General

  • Target

    129270f306a31455f8ea11b09f590cd7.pdf

  • Size

    79KB

  • MD5

    129270f306a31455f8ea11b09f590cd7

  • SHA1

    df75ca8d6c80e632f265b3a5015a225bec47f028

  • SHA256

    20f5f748000912ea04d17ce40dea5348ea0a25ebf3f376d8ee38115687156965

  • SHA512

    3dd7b6d6029ec9f0cd697d71822c29d85daa8a227744ba54b8c5e59bea7b6b9db5f244c051231e38063f81f58b97d112f0ba3c755f44ccffbf8b21fbe613f0f1

  • SSDEEP

    1536:8Wb3S7qZWsJEHBDUVvP0x/PFwELhv0AzgVFWkGOFAQ6+p5pfW8pO+BqG:hbi7G7Vvw/PeENvzgrGTQ6+p7W+R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\129270f306a31455f8ea11b09f590cd7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1840

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0f488f1792f666f1b2173a2c8b3f5c0b

          SHA1

          e9329c916e82d36ff1df129dec9774c3af3c54c1

          SHA256

          dfffa369112fc7c910222818f0b450a477b5a96e734be3956506d777a60f8968

          SHA512

          0bf72202f500cb8f48d4c4a95701944827be34da35e7bab692658a1ba7f155a87d8a78ee49779c121cc2e53a8e002a59c2d5c42d1453bdc64c2249c9bfe40f67