Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 14:35

General

  • Target

    1b91f84ac91baef7bf2168586aed9405.pdf

  • Size

    93KB

  • MD5

    1b91f84ac91baef7bf2168586aed9405

  • SHA1

    eb663388a39debde63f4e1ffdd0fd8d081545e66

  • SHA256

    83c4b35d902ce1d5d75f3316afc0cf01aee72995f9c87f4186f74f2d5c2f1fcc

  • SHA512

    092e006a9ae69b96398be371acb29f1d35248c1e7ecd710bb2217c38d9e2903885f04bf103bf45c338bc1a4d6a897924c03b6f941bbe0d2ee97adff8e249b895

  • SSDEEP

    1536:7SDS4Ax/o2L8lR8AiKZLBKoDUgrzxG1qA+teOrY9z2PkQcMWHpOvpLsg6WmBL9kl:+S4Ax/B8g9QbTrzxG4LtvrYuPvpAgkBQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b91f84ac91baef7bf2168586aed9405.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2848

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          005dd0909d661218356c3b9e543eb861

          SHA1

          7751510be3cf2aa1560b82834c3d95e204e6dc29

          SHA256

          f07661d57fa9a192ab32e47109cfa16e4191edb03896118f80259426043ea412

          SHA512

          4763d048ea9e796717c3c079d2cb68c43a698aaa3bf0055a9cacf7a9c32e5707f3a9041b3993e5e3d92667dba99601eb76748787e05aa2e46bebc94068a76d06