Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 13:25

General

  • Target

    19eb1dc2af42be726402ef97fb0e1c26.pdf

  • Size

    84KB

  • MD5

    19eb1dc2af42be726402ef97fb0e1c26

  • SHA1

    2648ea6be834f2eeb3d46c45566d2c5dfd7d8236

  • SHA256

    341513b2674dc5ab9aa56aa92dc777269b33d3cf670e6d034668e1b9699b358d

  • SHA512

    60488f0757d86cc369dd08ced1f24e0e1282e27fed31aece1c70d15302295b8d2343d40490cb2abb47cf3f99211ef29e10090914d48da62eb763ee04b33ebc7e

  • SSDEEP

    1536:M2eWaTO9Y90MOB9D/yJ8cDCAidYuJhkBeMjtBPV3WPCCEgQWapOtQHWSbUVtje72:pk62ha5480CAidvJhkHjp3fCRJtQJbDa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\19eb1dc2af42be726402ef97fb0e1c26.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2148

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ea21c3f3ed33660401e6b012014f7c1d

          SHA1

          7bce235385e8bb4b1ded44cf0822515293ddf8a2

          SHA256

          ce5b71ff03f2df442e4ab47cfc714d010a9c11e723bfa65a01bf503fdd0161bd

          SHA512

          3aecb6a1161cdd500b455b3aadad229130fa50a81be0f2cb8cd18998fd83956b592898b06473b00ac5dad089203175cf146a9f853c37adc12fd61bbb84ac5d35