Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 00:33

General

  • Target

    21d5087fcf2ce5e4815218388cae1589.pdf

  • Size

    83KB

  • MD5

    21d5087fcf2ce5e4815218388cae1589

  • SHA1

    78bff02bb942ca3ccbc6f8ad330f8cf46a5764c5

  • SHA256

    8227e648ff83d96cc34356171f4f7d759f319de1f84b99e6031d96658f2f5ec6

  • SHA512

    829a0150cdb87d8630ac0344e61f346c70751aa028f4bae7088d27a24c10d4cb8bd8535e7ddefd46532158588c16a034a28428c5f64d2e7786d01ecb9dd42f14

  • SSDEEP

    1536:6P/ccBY0Dwm0KMwDObALaWaRVEeqa+3UxwqQWIbWspOR5AiBW8QM11zH:LcBNUm/LDuyaWaRVEeqzkxwqfIaR5Aij

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\21d5087fcf2ce5e4815218388cae1589.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2076

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          150dd8abe1b45d3be60cd46802de3993

          SHA1

          d2871c533b553b659a74f6173a7d7e4347aee8e9

          SHA256

          019141d27f63a1f7b174a0d5befed3dcac9ebf43ad59c26934fd13620e5b3f29

          SHA512

          23920c3ab9fd36fccb9c07bb9a99c17171243a006d48d2bbd823c80c8fa912fa81293edbdc81a6ce01d8c9d679974c5f8b8d73f9bbf0fb0d7775d11f43b0b270