Analysis

  • max time kernel
    137s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 11:56

General

  • Target

    17b3cd3ce9564be81f332f70b467f929.pdf

  • Size

    87KB

  • MD5

    17b3cd3ce9564be81f332f70b467f929

  • SHA1

    b207478e78be063618294a7efadb7581a8b51bdb

  • SHA256

    4c2f0e9038cc41fa65347b45695744b11784943e9d1907c9836da38264b4fd70

  • SHA512

    d1aefe0eaaa886bbba033d44c15d39402afce59c163d7e3b74736c9ba4b524ab9656fc0c1324165c65dcd9b0eb4ec6293a4c4d2cd5c350b96cd3c7fad54c3960

  • SSDEEP

    1536:qUHgLdYUpUUJcxkGydmzBHueEU61CMQgq3sWcPofqg8GITempMAmlfQp2W8pO+qv:LHTuDNrgNueEV4gqIPQ8GTPAMQ/+m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17b3cd3ce9564be81f332f70b467f929.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f2fe9d99678219633e433dd51af80b1c

    SHA1

    0502473b12c44e4e820579aa9a7de701bee44e72

    SHA256

    ffc93448be920c374a681e0bddb362543cb545824d629be567910209c2f43da5

    SHA512

    5c41edceed4fe7b3f3002334830ef9e3f05b3f4383deae9ccaae4bfe078130f230377b5400fb607651762803b107c91cdaad0dd3d015fd5dfbcaa7ba8dbb8d3e