Analysis

  • max time kernel
    119s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:08

General

  • Target

    25c8b018cc72fca55158c5bab5ed248b.pdf

  • Size

    85KB

  • MD5

    25c8b018cc72fca55158c5bab5ed248b

  • SHA1

    99f26b3ec0182f8ebc87341aefd64ff13358d763

  • SHA256

    c7bb208ea380e8c23b36189a9b2350617da5ad359ddb71a6bd225837c92fed7d

  • SHA512

    e46ef08a4ecdcaf32540f519677c35425dd8ac7633177dd6e5d8531ed2cec3238887985617dcc143dc7390227f8ecde8775527f04816d271dda54fb73f4d1a03

  • SSDEEP

    1536:ke5HqKGVDZlctPwC7HrrX+JSWPqix7+ZdVcKonTbWOpOwrKWfq1IR9UPHT:LRqKGz6JLryJSWH0mT4wr1q+DUb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\25c8b018cc72fca55158c5bab5ed248b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2572

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          064cebcf4710fc124e7679041d41f1e1

          SHA1

          702de5cdd244a07af285aa236bd220a45a01f290

          SHA256

          43a6862d083d9bb124400ddecd182923d4aa64cb8309932d8d8874235e3dca4f

          SHA512

          2dad06c800ba700486fd40ebaa265e2d011817d06da14c43dcf67527692a17cb23254deaf416cac4a8c82090267cb763a69b3369d0f7a4cb174be6aae10f8cdb