Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 08:05

General

  • Target

    12f670f8918d2c33e24f8b8168e72c72.pdf

  • Size

    87KB

  • MD5

    12f670f8918d2c33e24f8b8168e72c72

  • SHA1

    c4345b2fca45989e6f3c1080f8f4aad1e45a03ec

  • SHA256

    c264aeeadee31b2db2e190cc13055597b0f147b062cf04fb27c8d61c5b8477e8

  • SHA512

    83b7801d968115fa0c933f465893a6f84e398e1da12c4dbcb2105b5d73ddd6a2dcc609280b07ac970958f3d112f08f7fb8d19b4161ccb99da1918df84dd8028f

  • SSDEEP

    1536:piBvtajPjcQWUGyFQX9RLh9CurkYQ+4WE9ZJ4Ke5D5WliehPW64W8pO7u1/Eqxqn:ktajrG7PRV9CYkYQ+Ip3eFreZW6j7obs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12f670f8918d2c33e24f8b8168e72c72.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3064

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8f5d1a8f8a5e30703dc1adff943d5d6f

          SHA1

          4978a85d29a8ab3defc43c4d14e3331e9d63101e

          SHA256

          7785c88284e6462c105543c64ccb1560389b52334045d455957300c06b7f711f

          SHA512

          99ee254a88305132263b512110d4d15be5edad1ba927fdcb9d128bbc128708dd90958cf1d0531e397a8c93f9c5630cf357c16d1f8297ee04115e052d558e9def