Analysis

  • max time kernel
    119s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 12:08

General

  • Target

    180babd95d1249174808a92127b42f9a.pdf

  • Size

    77KB

  • MD5

    180babd95d1249174808a92127b42f9a

  • SHA1

    39f7c7c742232dc2eff703ed7e59c71fc19ebab0

  • SHA256

    f0f6fac7ec4e59313ee2137c246078c9a4839eaa27e2c7bc35da6a8c8b5ffd1b

  • SHA512

    c58dbc4f3a660825d60bcfdc4f9aaf6a0119216e2673de07af2fcfebe1756e962ff46740519f25dceb49708011501ac8d2e3b9f8c127795c26b274f508a80f1b

  • SSDEEP

    1536:UxWpuxXafxTtAgZv67UpPtWVeeF8DUEecCIKJ6s6ElfzEhc/yHb0rlO3XW:1pGM1tIYpFAF8DnLxgLlfYhg5rlO2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\180babd95d1249174808a92127b42f9a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8fd0398c25f8160d24c497110d016960

          SHA1

          9401ad533a88201c7b75f3aec741d3a78582fe99

          SHA256

          a051b46894c04d3147f7372923f91ff5d92a834acc1d04924c3790af5f974831

          SHA512

          0b1940ba9ee2d72997b162b51dc549bc77664e90c76ea3e4c683617520971eafe5d4aa318fc5c00990b684f4c0c83db43fcf60b759c3026e9f4a6277abc536ea