Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 12:49

General

  • Target

    190b1f7b01f2613366713d095d5f20fa.pdf

  • Size

    90KB

  • MD5

    190b1f7b01f2613366713d095d5f20fa

  • SHA1

    be0fc9008be33b944074a04d80d36b83ca696973

  • SHA256

    4547c0390290c0e93386064babedab8ac8695fde202cf99056154e1e4273ef7a

  • SHA512

    4e50a6b7250ecfc8c4afe1b5ff30b1b49c8c0ba1f365e02216bacf5e18ec1b03aabc3fabc272f8f51cce3bdcbf5f4e39f7ff79ffd744001270215e2b5f5f2d54

  • SSDEEP

    1536:Fxt5sho1TW6DLHb2qVPhNFYsF7xy4MKcW7RdnpwXLnbVMFKWBWiAVPOWQpOCey1:T5rbfdVYsF7xy4FxRdpOLqFDn+PBCb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\190b1f7b01f2613366713d095d5f20fa.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    635c47321ec80d17640f5404780a42e8

    SHA1

    bf5ee72412842ff96146706313e2ff419b044c71

    SHA256

    bc6c1fe7e6a952c96d8ec5d5d2acbf4aa6b50b708426626d1de136e73aa2cc90

    SHA512

    ee3d7ce6915b9cdd3fdea105d04e6177de15e4a7a9a191144190f58123b89ddd1a6e3de1c38a51526d80f92522de06c489fd6ee4ea709d72e61fe7ec4a6d638a