Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 13:14

General

  • Target

    19a3b6ae38b0210b5481e12cc1fe2679.pdf

  • Size

    89KB

  • MD5

    19a3b6ae38b0210b5481e12cc1fe2679

  • SHA1

    40d665f5cb71748d08bfd240a078c77ea7aa5c21

  • SHA256

    447742b3403679c8e7675c25de492a99470eb858adb57d98f79372117490471c

  • SHA512

    6710070e464159b18a7e4aa2e2f61e2c209abe57f13317e3b896ae3ff5f70af384652497f2db352cacd5e25561f46c65a8fc8a30862c3fcbc803add3e055d445

  • SSDEEP

    1536:hH/jwPYDO2+GzMTc/rdf5r29ZKK3INzlFiVul+3kQAWEyY99U88ZWbpONgNSTgg:xPOQoAJf5CKK4Nni2+3kJX688bN6Sf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\19a3b6ae38b0210b5481e12cc1fe2679.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          266b954bf57613797777b067f72a257d

          SHA1

          7a6f8c305033861c70b7967972117d7e70e08b99

          SHA256

          09d807e282e9f5f9f895b9ff9642c46858308e08f8b6ae054609087050e13aa6

          SHA512

          1ce8c5b1ef7bedb0208c27d19ff2f296b11af7d43d7227894eb5a9c3e0425e7f3a15b9ac748885f0eab82d0d504c38514d63a19d53ff50cdeba3d89fbe9c3532