Analysis

  • max time kernel
    122s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 02:46

General

  • Target

    250b407031dfae845b5d5bae116edfb7.pdf

  • Size

    42KB

  • MD5

    250b407031dfae845b5d5bae116edfb7

  • SHA1

    77c92a2e338fbdc5acff05dce94e01cdba8a6ea9

  • SHA256

    653e6f2803a9d6a512e0cac055b5b0bf024251bf074136df5da1daf7fab5a324

  • SHA512

    29e9b8547c0bc822bf7cb5fae83752eda41c06f99935e0cf4d83848be0a8216709a39a2ac35fdc9ed1fbfe335e6b74ac01713ecb3f1f65c1156e6fa9d3e12612

  • SSDEEP

    768:6cbuTAaQfoR3geaa3k8DqXyKdOD8hQJwQpu6Y8gqWXfvCtobbcW9Vx9NKa/3H+hZ:5aQfop9k8DleInSqSCKbwGVxhH+fz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\250b407031dfae845b5d5bae116edfb7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    433c0d4a0c8ef091b3f8e9309606c1c0

    SHA1

    58b210135971eabcfbffa8620090d3aacc91ac28

    SHA256

    dbccddedb4d944aee13df85ac22e17e09654a46786364c0ddc83c97a3188cb89

    SHA512

    0397aaf990eddac9c69409a8274f3e39d052a8b854feacf27cea93c5caf9c85afbe9e6ba49b12f6f47ddeadae57cc03e97e04a70796181f7442bacf41409cb46