Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 13:21

General

  • Target

    19d13cca9be6c539d75b583edf213f75.pdf

  • Size

    35KB

  • MD5

    19d13cca9be6c539d75b583edf213f75

  • SHA1

    e140412fa37287eb28c1237679827ecdc88a3c0b

  • SHA256

    85c25ae14c1480a6646f86e7ae08499433cf8d298554a571b6bfbbaece4cc4eb

  • SHA512

    52664414fc2d2846d0a87b0873451d44bf4545105138fc8d996dbf5fea63dbd70b87808f65bb9e193f96551f3b7e41a740088b89c80786dd28afdc8573a2fd03

  • SSDEEP

    384:nIypkfUGp6suRmMeYzM9Bsuh1veWwTpvtQaxd+wxVIjf1+CUSzx58cdxZH2SNibl:IowUTfemas+WWavyaxfYMUv5HXOVdXh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\19d13cca9be6c539d75b583edf213f75.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7ef1d49daaa807c4fcc89dcf44a8f883

    SHA1

    a2b4e14fb9831b75fad1b9430b9c39c534b16263

    SHA256

    656fff65a6397f6ff1d85fdbef9aef9761a6176a5ea276a4c51e71bae84ba999

    SHA512

    38113209d894d699878a2f7dbc1d709fffad6d9787d2bf9b073d44d56a0d46b044fcfe86852948bb6b4f7f9a10a10b01babb257ed61265a5741e38144b6c5cf8