Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 13:30

General

  • Target

    1a101ba1b383775d8acfdd3a1fb519e7.pdf

  • Size

    76KB

  • MD5

    1a101ba1b383775d8acfdd3a1fb519e7

  • SHA1

    da24d066a9c22dc513a26257186ca36cb6589445

  • SHA256

    33ae7d45df2be4a3a72385601c99e0aa8ffbbf958f62fe948963dbd990c22d46

  • SHA512

    1ed09d957da211a3069e3f063acdcf36ba34bec6d08bd4fc1fbf0c838e2eced25327a0a34dcf761228c27fe4e8de6a0866f690b30c598a529cc40378823c0608

  • SSDEEP

    1536:7WABHTO/aqZvrj8Mx0VNxfcMCxr/fKL61FMuDdiCxAAD0aQpVrPXz4NWQz1tL:CABzOrFrj8Mx0VNFcxL15sCmiS7fapzD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1a101ba1b383775d8acfdd3a1fb519e7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1292

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f7970f3747ee4751783de29c8f3e1b40

          SHA1

          e2427989eba55dae3ccefda35400a23691d45a9e

          SHA256

          912a70b625602ee8767afcb815427fd69ff633a445f2fdb2f96d0e3fbb9a1fa6

          SHA512

          49b4b145bb786c29b2f14ff3a7331ece06eaab46590e93325db622d27de78b491550469fdcf793971d3cdab150c7d59a3dd354e232d7d60210af92aecaa98497