Analysis

  • max time kernel
    117s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 14:02

General

  • Target

    1ade4e74d3b16e6b9bd48629e65f9370.pdf

  • Size

    80KB

  • MD5

    1ade4e74d3b16e6b9bd48629e65f9370

  • SHA1

    9d240da0e1336709f773bb5033d401e1b0588af8

  • SHA256

    0b0b6a6c91cd4f67f62dc15c33b7023db513b3d7147889d833315d86fe0a3bcc

  • SHA512

    0d49513997936a9c1320ba605bb520597cd54d21d3ab9df8a7f44425254094b93834d73bf88752b35b6b8a33b358292b23d27bdf6ad164a06809cab6e8352eb1

  • SSDEEP

    1536:wosPM0Va5IEJTd75ga83sZ76N/muUaqSnrRlWUpO7JrIEi1wrxWtvSOC7Wj:dsmv7ER9munrrRI7JrItUoh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ade4e74d3b16e6b9bd48629e65f9370.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b58fc94c0c94813e1a03a6d291854f8e

    SHA1

    ff28b2f66cf97505c4517d9f319ccca66e58fcd5

    SHA256

    77196c3d2ec69de2c8b067206e2aea2b8ecfad90cd2684149838cf91550c80cb

    SHA512

    22612080ddb6b2ba1b1add5e178ef4b1bddf84fabf4e23cf7c0f153e75b309f50156d3ede56dec92adeb26b7f7e3f5a0fa14a52e84e3a97797678a1d7753330f