Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 11:47

General

  • Target

    177e42fd1f7b5059e598c92c60cb2eec.pdf

  • Size

    87KB

  • MD5

    177e42fd1f7b5059e598c92c60cb2eec

  • SHA1

    1d3de75daa5e03ed17501720cd60a15fc0d90f8a

  • SHA256

    49a2555e9d2a911dd59e39678eafd18b1dbf9b1e302c8998e5fd3c2eae56623a

  • SHA512

    7a62557385c02ea159c12203fee7f98b475b110ffa8ba9acbd9f68d5ef723a166297a603d018c09be88f90bea0ae5f8acf388eeca1f832887f7fc42d34674c58

  • SSDEEP

    1536:Bb9Pa33opsTPN+ilx/quMSm/xtTr7hKDntAWraXZUAn5qoybWUpO7itP9T:V1Y4pcN+i7/qqm/xt7hKDnt6UeByu7i/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\177e42fd1f7b5059e598c92c60cb2eec.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1f5e2006169e00205cb62d41403a3c16

    SHA1

    55a34dc86886181d13951311cd349ac48f3b6115

    SHA256

    7d18627262bb6a9444e8476d962362bb713b7188bfdc5907ba4aee5cb8683d67

    SHA512

    75eebf7d876298a69ddf50ce24d69972a0d5096c57349240c761ab098e93ac1b38dd4f42ace343c074b9e74a2183ee93dffc7a5493bf73d22d0554b63213f77b