Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 02:38

General

  • Target

    24c4d0913f830dbb5850d6a122d4a1a7.pdf

  • Size

    89KB

  • MD5

    24c4d0913f830dbb5850d6a122d4a1a7

  • SHA1

    136f74a66ac72609b79c402d0bc9e6b698a757b0

  • SHA256

    6b53db1a5ef68b59711f2b2bfb162567f02e00d86f0ee12334dafab538e6e66c

  • SHA512

    894079743479f414ef10b0806e5e8f404ad0992067221db8cc0f2728399440768cebd919c7a5f67e70249f3e2c4254c15c0db9ad8446cd4c36821b847bf1d7ec

  • SSDEEP

    1536:68YEL0EzGlgbT40dGw8aD3RpX5PHYhR/Wsw8+WjsnMMvTWrNz65AK59YdWspORfc:twEiAXP4hR/sJDTWrJQAKHYkRU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24c4d0913f830dbb5850d6a122d4a1a7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2b4e31403ea2c6d211f155b0a367d72a

          SHA1

          ef992a3e69943efe88de3c12c20fa5b2ed99b4c8

          SHA256

          085638faadeb09d45257076b1ad7b7bb59ec32b38811d2f733b5255a0dc3a716

          SHA512

          e5c52d985451ec105988383913b3b6e0cf73f3e210c4ba77aa4707bace0a4e9bc2ab0691d196a0c7aa802059507988f2bbf6d0de8a409174b5d79d5a8f303497