Analysis

  • max time kernel
    122s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 09:20

General

  • Target

    145855d71558ed8817f32e47c2d1f0e8.pdf

  • Size

    80KB

  • MD5

    145855d71558ed8817f32e47c2d1f0e8

  • SHA1

    8c1f84f7b24b9796e8acfe40d4300833397d5f4c

  • SHA256

    025028d99c25febad9e1c73f8d5fb396156624fe26ed2e68603e36dec5a6e14a

  • SHA512

    cf86f8265609bbfa12f469425610fd9da85d16ce8ac4d21a5e2f26a546fe7bc37ef00ab3975873e186c7f8395bf559e862f24c9548a0794ff34d2b4ff3d81026

  • SSDEEP

    1536:1I70llUi/Fa1ggFm84aagFt6wVJG2brnBlh8CWW02VW8pOGJ8iIWpZlIEQlOXgEF:+0llUZ1ggrRUwDtrnBX8CWW02AGai5Z1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\145855d71558ed8817f32e47c2d1f0e8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2108

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a737167a0daf4059c8796e8064286f82

          SHA1

          816a38e4be11faa7cab5a75346debe92858f8f95

          SHA256

          e4875e92089c4516a60c5d4e23b6a1a823f24f1d7e0a191ac835a725a8b86727

          SHA512

          cc24ad68abefdf2a97303c1b55deb36e642b118c54edf142aa175d071c02a9427449d2865d72a408265c60dfc41fa6641c533510ad9ebc5625144491b0a6090f