Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 13:10

General

  • Target

    1987cf36d8f2f70386388fb031712004.pdf

  • Size

    94KB

  • MD5

    1987cf36d8f2f70386388fb031712004

  • SHA1

    2e28499648c6bba00ef8429396e13d8947e7e39f

  • SHA256

    d5f43cb3dad831a8cc6c1da7776bb647aff78999d5d8449e46978cc658feed02

  • SHA512

    813141a29a5dd38a27be95ee3929c966489c2ddbf3c56522624e271a4271ab7fe34ffef2fc9b0ad855bafded2982aa41248ec7cb259196a2f2e2a7d8ee195f52

  • SSDEEP

    1536:yxe1nKEsvMVIkSab8aSOyYLXv6BrusZrdh+WxApOG2WIaXOTT0WC8u4FKfH:HnKA0S8aLz43Nr3GNqS8FC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1987cf36d8f2f70386388fb031712004.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    98995eb6749021b8b1f6832636ba270f

    SHA1

    16061b86c81e510e7bc6499502b8d574e761c8d1

    SHA256

    6d82e92680bf4b89243d5c78b52ef347f7dc5961eb144b2d469075a7fbdc63b4

    SHA512

    59b5201b534b54bc868e723f4efb0c1158fd4a27bf6b594bd95abd8317fa6ac00f5dc99e02e1f71f98c80250508af46721941312b75ed5b8a3ce55cf0f643e7e