Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 02:50

General

  • Target

    252a207e6d880ef41b0e3a4bdcb52206.pdf

  • Size

    81KB

  • MD5

    252a207e6d880ef41b0e3a4bdcb52206

  • SHA1

    b0c67b1a0e1557815fe7aac48f48ab53c6c18e8c

  • SHA256

    1c15ca61c58ba82dd867217b2791f4fd910b17f510316c3e7eda1bd0e8cbc20f

  • SHA512

    1e439bb4b256a96c43f8028132024d16ea64531ce2ab27665c7fb16c2a120a69f2aabc3bb47aa5f48e21356cd3a593b1b63b971a891f99c09019a1ee5775c499

  • SSDEEP

    1536:nnp4JkAEo/xJonP7SuUuVEvO4evtGheWOWuzs9bxm19wWOpOaZjqTWpp:fIpJ+PKuVEvO42GqJWbmNaZew

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\252a207e6d880ef41b0e3a4bdcb52206.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2312

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bb162408b219fcc82c6b34b3964f951b

          SHA1

          d878d910d4a7fa2a64a4bfcb331b94380dfd0d68

          SHA256

          cb14ef9f489a62ebd608552ebd44d61cd831523fe4620d8d767fa6a9fbae76d0

          SHA512

          8ee8ee4409c919925a62134450f5c74e214bfaf8d618a5159be0bdef76d0627caefeb201c83a49bed3ea5051ca004ce91523e3a0f06af8c7fc15814c5e62b6c9