Analysis

  • max time kernel
    127s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 10:54

General

  • Target

    1683a1d2bac2402d513a78db415c0c85.pdf

  • Size

    86KB

  • MD5

    1683a1d2bac2402d513a78db415c0c85

  • SHA1

    af37a99d33d19445e12c7c089a324032a8334968

  • SHA256

    3156501eaf1e4e8d026462e8595db153be85fc2ea81725896c9c1bd6d7e3ddf1

  • SHA512

    b61e6b6c04e08b3c379d6a0bbe123fbf8535821fffe6a81fbc8511a2182aa56367c67c7f3a99edec2548e0c51c73e6e88514f736ea555ab3f85a54fde9b27db7

  • SSDEEP

    1536:bIfiHkx6/BEPu+j1M6PGH3hCKcpZYHQWkNpOPaWRS7oQjvlMQd:mx62m+O6eHRCKcpZYFPTS7o6D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1683a1d2bac2402d513a78db415c0c85.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    304b9181fc68196ba31f380272a76ff9

    SHA1

    ea669c36951a25ef7fdf349378d79f6edae6b5a1

    SHA256

    3e9c3f4ded21db3a2b7a262593be1181c5a978bab8db1c4fab0738b4fd0c5f1e

    SHA512

    c531106b1f4a2192480301a39990effdd884993c7bf4d06c5fa2f821514d669a0a92bbbfdc856b5e0a18ac3685e52c75eb3362e09b026cce6a8a089bfd171e86