Analysis

  • max time kernel
    122s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 14:02

General

  • Target

    1addc42a427398cd007706af031881b7.pdf

  • Size

    86KB

  • MD5

    1addc42a427398cd007706af031881b7

  • SHA1

    5986273d98b18798f70a39d65ea53846d607206a

  • SHA256

    c50a57b049378a53d1630907b5944b6a18941bf7f2ae05ce36702d22e2ed17ad

  • SHA512

    7ec9d6d73d97824e2124b2361f39aef665f3a4b28f538acb129c71edde3376793c51641c802f5f190c0eeda5d44b9e6e166ae515a586e98cfd90e7c7efa70f92

  • SSDEEP

    1536:+ym2ws6NLMe+VmmHZyXe8QdaqUzV3NNe96GzHBp4JeAiWWvCeCiwyWOpOaZnJVES:vm2SUmmHZyXe8QMpZ9k96ihplPvCeCi1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1addc42a427398cd007706af031881b7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1640

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          11c5cdc40e5bec3c3b3fb2e7a9e36c4e

          SHA1

          3992e39102918c93890ad46c38daa0c718f334f9

          SHA256

          16d2851304dd8ef37ff080be2b33a8754395e7e7590f4b32d91a6cadb7aaf594

          SHA512

          e035f32b86de841f3e2ec01efa4a48e7e9189b21d0d974d240b6c9a282c23cf243d261bc78994092ba9ccd5d62215617a4ef6e3476513aa526e588a03320e602