Analysis

  • max time kernel
    121s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 07:53

General

  • Target

    12b409323d19fe46237851353014ff85.pdf

  • Size

    95KB

  • MD5

    12b409323d19fe46237851353014ff85

  • SHA1

    bc165900d7e8ea9ad807ee3f58411dd6cd064d11

  • SHA256

    a1b4170353655dc72769d6b48a5092d75675db6ce415d9295f80cb1475303ae0

  • SHA512

    e065d47c84b762f9699a1ea926ae6dd51990228e6df91879e6facb797e55956313a49cbbc127060997b61535ef9dbfcf1872cac7b9da48a4134cf8f1b0a9d5f4

  • SSDEEP

    1536:td2B6TecMlNyhUlLfDll/NrfvcTy1bi9pKsCQHG5y2/cutMI0gto42loryMSyHWj:KB6JMloKlLn/1kCi9pK0m5vcOMctoLCO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12b409323d19fe46237851353014ff85.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7292b00300ec33c1c3b98db90ae3be27

    SHA1

    31cc7b878421e01c3f85c44f892a959a3af00eef

    SHA256

    5d5008753927a4005a6781aa7f47280f0b73d21de25c2d76cc2d329ca85750f4

    SHA512

    33d67ba90d16b45b8227b399fa7e5a054974945fdd145b6a2352b2d29a483eac8774abc4b415246c20343194be5d4856298dfa1e121ec8a4eb838e6a177d672f