Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 08:30

General

  • Target

    137549b5aa4e84b7f1fda3d4569ab4fb.pdf

  • Size

    85KB

  • MD5

    137549b5aa4e84b7f1fda3d4569ab4fb

  • SHA1

    a3f2c50ab8f5b529351e1e020d77ab16d57a8e23

  • SHA256

    68cb8b1752dbfb5c9e6be380a428d8e141c8d9120d7c6bb3023dbf93ec7c2d7c

  • SHA512

    2d1ac7593bb29f1f808fe972ac6823c3eadae66d64036df18e9342b1352e754f4d0df9d911586bb247fd7b5a59067d2832b516c165f707f85ea87ef2e6ad8d9a

  • SSDEEP

    1536:zcfI/8yROT5YUNMtZPDu6bD6Tc42R4yWBkQzbfZWypOlWWxsSGbZrMewEguUvH5a:J8yRO3+Bd36TcezvClDnUrNw9NP5a

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\137549b5aa4e84b7f1fda3d4569ab4fb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    53b0613dbcb2551897b67e959d2dfc55

    SHA1

    29fbf66d58a8b96d0060441c441b44a27d2f29cd

    SHA256

    367911099cf2cded11adb43eb4203e180a1d78d992a9986b3f2cab3ed5829845

    SHA512

    f5745f930bb103759bb05d3dd195b33392a1b1629c8ced5794ae23e9c87dd1aafc1625835754867569e76ab2cfc427c1808d4a983ecf82f19b9e26052ff3e1be