Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 04:24

General

  • Target

    280beb40e17b1eb9981fb5d209a0ce13.pdf

  • Size

    86KB

  • MD5

    280beb40e17b1eb9981fb5d209a0ce13

  • SHA1

    39ea7e43a5f06b994d5ebf37e7e7402222ffbaea

  • SHA256

    11f73c274e0f573449573860660513dc975f11d72bec94277c0ef1d3da43387a

  • SHA512

    19d573d426b031baaee79b15242e820925839f2d8479ab858a01febb489c081daa6f9fe68764e3bfaf6493c3eaf1dfecad1fc89b433fe26a247a7def832b220f

  • SSDEEP

    1536:jlWyfufu41ZuxBQcz8VOyolhvdxJ8rQElWe3DW4S0VIWJ1Gp/hoWduKjWepOyEAT:vuf7yBQvrODjoVgenVZ1GPsKAyl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\280beb40e17b1eb9981fb5d209a0ce13.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2456

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          befdcab1defa58ff1fad23c23c0f6af9

          SHA1

          04d0a599b120863c42de9102a3876a1d5629ffa6

          SHA256

          0e268a9e456d745d7414f35e263648b0d934d4ab8b4c9e28d48b5549a47b8e04

          SHA512

          9fd632a60bc4aef5997b78c891a92f1a47a0e8e1c7c5a07984661c46e5d76dd9f2d5179bb8bf4c050b7dcfae0b0b9b72213e8591dfdc1c1cca5f24ff743c8579