Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 02:57

General

  • Target

    256f0c0f52677c24cf3ba83b334589ca.pdf

  • Size

    50KB

  • MD5

    256f0c0f52677c24cf3ba83b334589ca

  • SHA1

    07505a2546051dcc7abcbaed9f280925a7ffd21f

  • SHA256

    560513452298d4358727e2d90f9f51617e9c04d6a8b22658268e82d0ce48c0b5

  • SHA512

    8801046f786303f1b91d75bc902b4f0ea312fe2463c54b8f830ed60d9e2300c1b138f4080fe24ce6626e4f95816c1be738a21955279b8dbac877402b41a0b081

  • SSDEEP

    768:7WKKh60xPgLconkJLwF8zbwWD9Z6uND293IezUxbgqSOp7YVQT+LdY:CKM6GPgLY0FOrDf43I3UqSOp8VZLdY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\256f0c0f52677c24cf3ba83b334589ca.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1628

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b56bd9faead06cfd65562012080c1b35

          SHA1

          47fc37b6c9f7df56c8ea2a03d6335a502a4d0284

          SHA256

          9bf92e239482fb06833edbba288a4b85e6ced0a1936120d1903b55bd291eb78c

          SHA512

          8bd1b80d9d21bd3b87a574b0e00a73ffd6332540493f6d98bd4e334b6b1fec5e260ad53876fb93fbca300b3278f69615983f84f355f47df6904e0ddc27724d82