Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 12:56

General

  • Target

    192fc6b78f4f55955fc3876892c66753.pdf

  • Size

    162KB

  • MD5

    192fc6b78f4f55955fc3876892c66753

  • SHA1

    ea74293f4511e581cfa1c17b646315d3de1769fe

  • SHA256

    0d683efd1a064868e7d49a8aa1aaf4e66e58583f3074e1f7fa2d7f116a1a15c1

  • SHA512

    bcf2efd67e011cf1af1db94e5ef6a291d6cee8a74f9acfbbafe31adc895f64c683ca6f21055f58e91befadcaf32259563b91232b768be37c58edd50b6cdb44b4

  • SSDEEP

    3072:7xTUNLlViQDY95DQwxEg6TdZ6dEpo8PlyZu1gHGi69AL7zkwQ/RjXastZ:+tlVimY9KwxEGZ8UuCHGKgRn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\192fc6b78f4f55955fc3876892c66753.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    723bd58b73b62da0ff3468ba7e24a236

    SHA1

    d4e8ce670e27f82a6cdfc120610429104b9fac24

    SHA256

    f9cc7be0150842965419d3b078de19e863defdbe84fbe38e1a5545d048be8015

    SHA512

    5ace6c6749a208394dbd5fc4c1da7bc099aceb54d1082f9f74359bf643af44b8baeb07550206bfde4d7570f70f86a8d7853ee6a35d4d2ff4c2d4b3b0416385e9