Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 07:51

General

  • Target

    12a259a61a3857b5c04b5333f04cc615.pdf

  • Size

    73KB

  • MD5

    12a259a61a3857b5c04b5333f04cc615

  • SHA1

    b99a5669c481a8b6e5a53499cf65bc80e18064c7

  • SHA256

    81511282fdeb624d59772245b9ce503e5fee406e07bc802e165856ca989a9ef9

  • SHA512

    3046d93adb1b3cedffb92eef5b5c603da382e57f9efd1dcd4a24c7cfbad5873ef452dd6c56b31de1083a9fab0e28c7830767821a13d6546a82ec3879a3bfd933

  • SSDEEP

    1536:1gBWR44y5eeynXploPtJl31kZQrHXbjK7YJZjGyd8SleP:TyYeynZmPtjXbjK7YJNGyaSg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12a259a61a3857b5c04b5333f04cc615.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1740

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          26a38503ec9b3e6434e09e31a02c0a55

          SHA1

          3ac796ab4e15749e16553400575b44a7a13bcc12

          SHA256

          ead2ea422bb61193f3ddcdcad158e8516b836d737b2d42b5c97bb68d59178193

          SHA512

          168d56dc81f509940ba7032e1b03240976484d0c17bb7d1527963db3df6b26de40d19472967630a4e1dba1c41661818ebb96956203aec1f8f440b1e046c556d0