Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 20:55

General

  • Target

    1c47e7c18719389d74481dd764c1ede7.pdf

  • Size

    22KB

  • MD5

    1c47e7c18719389d74481dd764c1ede7

  • SHA1

    095d3f410b23553004ca92015b224f069a4879c3

  • SHA256

    da739ee739da20ff88b89444345dce52f64f0bf526c9af6b0803ef79447fcf24

  • SHA512

    92f5486e5adca7467cc1245d88e0d425b769f4ee67eb0e4c8347ae0ed3c04264666216a6436a51e7c4f17e9fedcd03f7660f654311b6992e3f68e36740fe2828

  • SSDEEP

    384:Q6L97NX7/ZnYzDTMxdsUTGVeiYdE2uCnLHEzTmSXnSCqnjEZ2G7QZr:FXDibMxdri6buCryTmQ0jEgGk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c47e7c18719389d74481dd764c1ede7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7a11875ef104706005fa3b33145dee17

    SHA1

    b50c990bbc587f5a208c1c72e6da87ad66d8be35

    SHA256

    08c6f628f9ce28d9a86efba7f0b325bc52a227a71ffd85da640df6d30b9f993d

    SHA512

    5293626cff1bb9125a47403ae8e00e2154ee86983595445bdecfe2ff264edce199cf2790115bc29370da728e61818548a84b64399b6e4120359e0bb04d4def1b

  • memory/1964-0-0x0000000002A30000-0x0000000002AA6000-memory.dmp

    Filesize

    472KB