Analysis

  • max time kernel
    223s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 08:57

General

  • Target

    13e6c412c8c242de5665f8016fcbd0db.pdf

  • Size

    78KB

  • MD5

    13e6c412c8c242de5665f8016fcbd0db

  • SHA1

    80c288c31dc96decb0e969aaa5a4a46b5e381e18

  • SHA256

    1fd6a6bd6ae679e107cb8a7680e50662b756b3be51425c5cb077bb754f6fe5ac

  • SHA512

    37866d713f2fa2c5367fe540b9bc00e9abc62d2835778ccf84e1ada25cd0acac1d2750d75b96d753f566306d10ea64211354a2fa6ee5a25d8267c0daafdd3a43

  • SSDEEP

    1536:2P+jLP5J5CGdXw086ZVipqG5Wz+fMlU6eZz1AwcHZun6Mxrm1qw:BjLPL54aGncU55LSG6MxST

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\13e6c412c8c242de5665f8016fcbd0db.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2f7a35b154ae2b3c43faafad8ad6399e

    SHA1

    9f601620b52346ae02bd766b9167726e0a412bba

    SHA256

    b3bee21d5abfc07e42d148bbe351d9515b04bce6161d1d75ff50b590043dca2b

    SHA512

    e09bb6f806c48105d20fc44d5c993fc798d7b071d1f5f81752c6ddf42b1e43780cd0efefd35ec22f1407640a88f90b947c8a9db286efc4391391b98655c92810