Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 13:26

General

  • Target

    19f41dd2d4913a13c02e1ddba70aa805.pdf

  • Size

    96KB

  • MD5

    19f41dd2d4913a13c02e1ddba70aa805

  • SHA1

    39260a2f4379ab40cc09ba31431e00fe190607f2

  • SHA256

    7ef5119aebd5bf0d22cb913621e01b610e14078d02aa5c9f8d07723c82142f2b

  • SHA512

    c3fc208aa28171d519e174082b132e7be536c969e4bdf4d59b0ce78110d4b78d97fecf1e68969d3709d87b7ac2c8ff1f203cc72d36bbe0d36ffc21c0472a1a0d

  • SSDEEP

    1536:HmXPXoEHaZYbcRAwtWGTZrQDPO8H0GeR+cQdkl7DTEWUAfwpAEWOpOwrmJxe:mXRAYbcpFrWO8UXR+cQi3TPIAhwrmW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\19f41dd2d4913a13c02e1ddba70aa805.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8268e74f01e06b742e7970a14fc41389

    SHA1

    2942f22ab6426eaa0bc0ed985647f44d2a92fc77

    SHA256

    6b2afef5cc31b98f86458b03cda25dea86f753db9cd9e8536f0e425008c1b601

    SHA512

    c1a44abf772e14a84f3413f0ba3a901a7fba13b2c8cabdeaaf4a34f3f31c9037762ef6fcae787c0f20ea24ce86804f51c4c2d2aaf79431018dd7c43eac51a61d