Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 11:33

General

  • Target

    1739288c486ea5c6e3626721926632ae.pdf

  • Size

    87KB

  • MD5

    1739288c486ea5c6e3626721926632ae

  • SHA1

    e86f187c07ed132a6ad2b70751f48f745cf6dc90

  • SHA256

    d8e65c485d8ac55cb526093d9eab415045f94200442a963f2c0356e583e17f04

  • SHA512

    af93a2cbabb074986287bc7535f21449b8adc806a1f81df416e4d8e853237ad43024abdb48811ae2110f0ce0bc1522a15691387db18caf1a29be85e554cf0fb8

  • SSDEEP

    1536:h0WWRhEYjfpxqkU7qRBFIbbpQqENsNC+W5Q4/bnc5dC8WrYt7v+WOpOwrXm7ui:iWSfp5LRB4yXONC+MQ4/bngPRTwrXmL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1739288c486ea5c6e3626721926632ae.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1276

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8dedc771dc018fb2a46c9f04ee309d23

          SHA1

          28b69ac73a6a44d52c28d3a94fddb08360a421ae

          SHA256

          0db6eceb9cb6ad8a96f4e72b02d21b5aea121417cd1c35254726821ee8f9ebff

          SHA512

          f6a729f5fa61d7e94985d6404ec963d6cce4a15ab9bd28e10b6ef4c9f71d8171aa70ed8428621f41df956851afd119a2092f09bd7d5fbc0760fc130f01746aea