Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 00:38

General

  • Target

    21fc5b47e3bb6fe1c1b97effdbba71f7.pdf

  • Size

    77KB

  • MD5

    21fc5b47e3bb6fe1c1b97effdbba71f7

  • SHA1

    65c5b8cef9802f257497395c40a770794bbe6060

  • SHA256

    7aa9f8e347f6a89b3a577f105e1cb5f90713b61fa7d585cd23a0a54c4066f11a

  • SHA512

    e31f157ba868905033bc2226302f29bfcdbe79532668d50b9cdafa0881ebfce942184c0673f975e2b4c2a3fe70917311bef1e77da8c2d359a76f5ac7c7c9ebdc

  • SSDEEP

    1536:Ewx4HPJwpmMRvgTa1GhxCALvYIVFJACyKiWySIoW7UOeWQpOCQH0:p4HP6pmMR+wA79JNyK0SIRQORCn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\21fc5b47e3bb6fe1c1b97effdbba71f7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d8717b1155f9fed21295d65056888504

    SHA1

    7b8b56e9c6bbedca879ef4facbd0c57aba75da2e

    SHA256

    84466ca75002e3a8b5882a418ed7f094a699f3b4dcac69ab4e5e2636c2c136c9

    SHA512

    5e2b226a70a158c140217c0db5a5ca1d319c665e163c357bb2d680703c36cd01665897dd45a5f21def8559885918e404e2a3355c1765381caf305946ed4832f1