Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 13:43

General

  • Target

    1a65828066cd2b72cfa72d9989e07621.pdf

  • Size

    35KB

  • MD5

    1a65828066cd2b72cfa72d9989e07621

  • SHA1

    6a681c53f9348821320fdc3abaffa7eb502121e2

  • SHA256

    437ac1ca3a782857c3f9dc3670f105911c5c89010fc374164713a0c8732626ca

  • SHA512

    452f5a04695044b48f002d58f2b086e2c94931756315acddfb79f3be41dd7de27942934129f743015fefb1f18015da374cbe351de8f5fc37478b81232e118753

  • SSDEEP

    384:5HmKO1AEmEm1tYsRmjru3wGzeQIO2eFZ6uuca4xCUS2j6KSQvZt2T1T+GBXG2OVs:5GKOqEmEm4sRm2B/IOH61YZSwm2MH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1a65828066cd2b72cfa72d9989e07621.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    eaf13867ce47a0b14912cc9577042a32

    SHA1

    d5c6b621bb205b910460b3fa960f6364052c6e8c

    SHA256

    9d220754e649d9a1c089ff0c119d775eb813358934004500758efb16a114a4ba

    SHA512

    e4f79b0eb66e915f394075fcca661e9ad0a8db2dcfdb093a852d3e2aff4313fe649a7be6182b3a09b17caa22db7d6780405df34ee0ca00c5c757791be989637a