Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 10:11

General

  • Target

    157ce4de4cf1b864f9090f6cb8ba8c79.pdf

  • Size

    88KB

  • MD5

    157ce4de4cf1b864f9090f6cb8ba8c79

  • SHA1

    6bebc8e12efe4efa91cd050a7a3523241674d6b9

  • SHA256

    7d4e1a84a5866128ea174cdfd1f25399418e4df357c3a2fb583045a55e207aa6

  • SHA512

    4e84051fe3250dd7afc2ebca734944b3882ed145418e11240bb9dc8b247c2b1c145a343e3ca393272a9f49b61d5b8480a1d0a70d69c54cfee552900f54645f1e

  • SSDEEP

    1536:9n5oiqlaO7hKPkkvtmBaoFBQzg0KGSJxzZbTtYjxnAWCpOViMTZHLj4Ww3XZXH58:/o6OFKPFvt1oFBQP7SJxzZbTSxRViOL/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\157ce4de4cf1b864f9090f6cb8ba8c79.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9edef855f99de567dde8e96a0b6b40cb

    SHA1

    dccb4cc4deff445a3e73c6990cb1d336c0cde2a4

    SHA256

    848a3f174ef3f89f9f3064a9d083e078d9879ddc7fb0585f4ad51e61ce16fc73

    SHA512

    5b13b1422a291c2e161b5e3822417ffdf2b1243dc01377a87a804b1023c886af4093dc19e6e479190ab1336faba032993ad9337d27464cea8538bff3e37d0b9a