Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 00:18

General

  • Target

    216b07412edc41f2715114bec3a5b65e.pdf

  • Size

    85KB

  • MD5

    216b07412edc41f2715114bec3a5b65e

  • SHA1

    e38982910ab0a03976f06e04b175c39cd8aef1d8

  • SHA256

    a12b53f5983a0e86d3c3043e3c7f67077aec60f4bc0a2792505ec21876ae45b7

  • SHA512

    f2c1bb033dd8c8de0fcd1d93d085e007c98cdd895a02efb01c8d85caa3f4345620c53c9a2c41d0b66fe3d19a58ec1b04f101b673961db9bc61501d5bdbcb0beb

  • SSDEEP

    1536:85tMAXctjoMC4i6URpYPmO3zOhLMEAiDH1U+2SvxaM46+WxBTRjUNapA8DrW8pOO:wtMAXcRoOil/YPbwLMEnzN2Svt46rdRX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\216b07412edc41f2715114bec3a5b65e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2352

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          53f40c2fbcd6510cf844024269fcd901

          SHA1

          abafe249a109ea24d37fe1bb0a4d0bccb47ad2c1

          SHA256

          650cd7f445fd865707b4d0c240913d702524b229c96356d8f134a2c5ab7068e0

          SHA512

          52af77fe8fe5eaf148290b14b4cac9d4a47ca43b831d0c5add103d89bfdf489131d0f43c064ab3604dd61c98db67acbaf0ce5c79305f02b207bca17462e57bf7