Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 09:58

General

  • Target

    1527ca5ad434ac7736945bee7e9e69e8.pdf

  • Size

    84KB

  • MD5

    1527ca5ad434ac7736945bee7e9e69e8

  • SHA1

    9c418b17fdb4bf27b0b6f84f1f88e92d9901cfd8

  • SHA256

    84d9f1df1fcc98475b57057e29bf73195230b332175629a6401eaa0cf426d2ce

  • SHA512

    7aa9f2998b91b32a53c943255ec4ecb0a30a88d7db53618a4e03d6b7e77c50ad39315b5759669f7569dcb34a5d978540ea5ca9d6ee6e4d2d2f42bad4bc6f0966

  • SSDEEP

    1536:Sq0+suw5h4z7RXfeA7uh3I9+T0yPzYHhpWsCOeTxzE8066MwW02BIL7wo4WOpOaU:o+s/GdfeouJI9gPPzYHhpWOeTxA8066l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1527ca5ad434ac7736945bee7e9e69e8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7a7640c78f9d191063e37091a58b31f3

    SHA1

    e307c03d2862f41752ed48953a716bae518cc6e6

    SHA256

    ff1e047da4e2fc0c504ef7dca19c2b8f91bb83b9f60de0643370829f21c17798

    SHA512

    d7de4e768bb37e87e1a513e1214aa1a91706ab699cbd24fadf74c6020383b4a3eebe338c73647405aa1499114b160ef575178669580c69f4b97b096f7262737f