Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 09:47

General

  • Target

    14e320003a450aa73ce3f45b4413615b.pdf

  • Size

    76KB

  • MD5

    14e320003a450aa73ce3f45b4413615b

  • SHA1

    674e59eaeda2d337a7fb55dad5d3400bdfdd388d

  • SHA256

    9cfe3efe6b0ffcf352e05b635781d42dbf496881832fec2b4be6c8da17a8c165

  • SHA512

    aa9d4e14e9bfa0dc01887863c46493ab44e3fdaf8af973783b6a75c96ac85eff47c7cd64034f4f154a734b9950e205a9f68ea4836cab30dbcb114eaa73413819

  • SSDEEP

    1536:ziuKc/yRcvegFTYm/06CQB2cGsKMW7wScx0s8aOxZyWb/flg7ncr5:zlKc/gsTYm/0ts2cMv7wzHOxQWb+7Q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14e320003a450aa73ce3f45b4413615b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2916

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          75a4ebe4e62d7c270e26baa302c8e111

          SHA1

          cd9ae0366b98f1024ccdb31a3273453196b2dbd2

          SHA256

          04d6d6abc046d3b5df3bf67d95ebb04216ec69d43992046c5d5f03df27542212

          SHA512

          79a1b7600dbe580848a2e85a0d4cf519f40062181aa683bc66a43e1cc29e5bded5d2bf31c5dfedb6a41fb23867eb2ae88af2fbc67a7bf1e88de44e69de39205c