Analysis

  • max time kernel
    118s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 12:44

General

  • Target

    18e75faca80e412b8e9bb2e8d8243d67.pdf

  • Size

    105KB

  • MD5

    18e75faca80e412b8e9bb2e8d8243d67

  • SHA1

    39092be35850f41208207ec6ceb63e78570a308b

  • SHA256

    3f8464474fc0fcd06a3d25306f66c11aafd9cc7f5e574b539520e6c6b32a6bef

  • SHA512

    09cf11a34a09a19a39eb783e7e68f2b98618500b97f5a73ba725c6a1f989ca04dccdce9660f774a7423769aee6f21dabb110d4df816d0fda88c5c934dafb60b3

  • SSDEEP

    1536:cDfDQsfOeJyxSGSdgbTkNYXifJAqyltm7VeBxUG+47Sf0esIIYQBu5jTFWkNpOPd:QJ7GS5DyltYyiGU0eskcP7+SR0qf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\18e75faca80e412b8e9bb2e8d8243d67.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1952

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          75ae25fbbba5da0a248d5c4ddf8edbb3

          SHA1

          92fd4c1350c737c577e10066556cec7ff7468567

          SHA256

          04d792bd3b75c54ad76946f16f4149000bec5bf736de2abd7b136c74fe843e83

          SHA512

          132724bf00eda6f5f2c2554529c5a778097c7b89b390be2889db9f200a30544c5df960cc4e931297083c63da084a6889863d11b3e64d1ffc26c644bc47be3ef9