Analysis

  • max time kernel
    123s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 00:27

General

  • Target

    21aaed8ec480dbf5dd4f3b828a08e2c4.pdf

  • Size

    76KB

  • MD5

    21aaed8ec480dbf5dd4f3b828a08e2c4

  • SHA1

    e035300b7335916d7faa80311dd9f3a9ffd5af84

  • SHA256

    dde1bb91a35c293caab6fc29141cf7080d42b6a697e87b2d98585546d06a0271

  • SHA512

    fc18ea03fc39e6d4aeb8bc2c6c39c3aeee659738925b695a34f920eb7e0dea9232fe31d712d0e72c1b7732acd36250943677927018bb5839345e91fa49d7408b

  • SSDEEP

    1536:69n9i9uXyUKvejbYswgOWASFGkXk5WnpO3nWVwqng5qW5/uhtEmp/a:wnocwvaU/+LUb3gBsqU/uhmr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\21aaed8ec480dbf5dd4f3b828a08e2c4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b8940deb3f7c185c16cd99e3e0e717d9

    SHA1

    9088d44141b6d4ca0724451b97025e839340f5c9

    SHA256

    d7ed0571f8bc9780098326ae22ba9436406c3b8fd1c13becf16b20f3add21169

    SHA512

    d8a42286b81df0bda85ed5b405f337a2544d1b9fe4710ec39690edf955a9d7efe7c7fd74c50c233bdb09b5dafd910bd876a7c91107de806fe9bbf62ed2d97292