Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 01:44

General

  • Target

    233860b334b1e54c2ff78698b7d6cc53.pdf

  • Size

    85KB

  • MD5

    233860b334b1e54c2ff78698b7d6cc53

  • SHA1

    9fe013200073544b5bd46c3ea38a89f652c0b0c7

  • SHA256

    242daf772881d281361277de32940aa7ccb0200bda6b5dc9550cbfeed53d878a

  • SHA512

    b18e6e0db062cf8ee7afde0bc6ef9b582eb4e6bb7f18eb720a62168d0b7fcfe32d8e313b6c4e82526facc618a374e0ce4db943a1670e8476392002762718a5eb

  • SSDEEP

    1536:3xz28m8JDcoIk4hdBWGXOwbeOWhHg7AEpjYBnVpWHyUiwrWsgnM2W8pO7NRTl:t2/8JDc57hdB7XOw30Kf2BVFPwrTgnMH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\233860b334b1e54c2ff78698b7d6cc53.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7b93e01af6ff66def7d7253f500cdaee

    SHA1

    9b01def9e9d9ff72faa6093096685be42104ea48

    SHA256

    14bb81260df5c170e330f551e77e087af2cfbe6e712fe0017d6362070c42f88a

    SHA512

    c30a262d69529fbf486603fd3c0ed3f85dc61c4e3f2799a3c413ae4b6163b1243521c3e19d5d708a5eb9750e4a047342cdde87823ff7a745b0bc618c6a41bc3f