Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 01:39

General

  • Target

    231688edae6871218c6e15366b993a3e.pdf

  • Size

    85KB

  • MD5

    231688edae6871218c6e15366b993a3e

  • SHA1

    8159b97324dcf7c75d50443cc3fba939ec5117d7

  • SHA256

    2c8332b90bb894c9687fc76d7ddf333d3d1fe8c51f6ad24b5eb9987ad851fda6

  • SHA512

    f843336b58056952d445859267cbd58b4ec7cb7dc847c87a6120587f74145a07d9df501fb2c0c7e6f7b94378d4c5864d65f55dd842ec9601e55120c7f957b9b5

  • SSDEEP

    1536:JJJktA3DTq2J+N5J1/E1d5jUrkKyVApdRoVb1LGDW6pOu26WLQ+/Rse6:n2tQD6N31/E1nnKuyd6b1LGIu2DZI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\231688edae6871218c6e15366b993a3e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2980

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5656e3d4831fbdf838369fbdbca8aff2

          SHA1

          f46c63cd6cccd61f3c05749cc73b1b05c9f10a3e

          SHA256

          1fa0aceef45cae4ea34fecc6bc0c1d9956c1769f176ea9a67ef70e77f763e27a

          SHA512

          d2aa9b2a811fb439e81e282c6d03fc1e4c1e67a1b94d3a0e95a2b3c02212a82238c7b09c1a01d4fffb3ce67afbe3d0bef2255472c3a8f34468e5240595b59a4b