Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 04:38

General

  • Target

    287fe013ae76586882fd44ec05ff1790.pdf

  • Size

    82KB

  • MD5

    287fe013ae76586882fd44ec05ff1790

  • SHA1

    d12ba6878604ff491e06a87b755975fda0ab8b8e

  • SHA256

    7077b808973312077861d8a0b22051a751f01169f02c8eaaf2b98fb203e88e4e

  • SHA512

    738855e136d4e780b33c1205ae40b23a8c3ef3e59d034b440fa669ae3a0ec49ffebc1c92fa0c9b7ce38daff8c456ee0daeac291409a8eca9b9f98b9756e5b927

  • SSDEEP

    1536:aQljJI1fxV3NmsHRmUxcxysfryrGIjbN0iGwWkNpOPENp2WVa5IWMZkY:81P4sxmUxs+rQDFPENpvk3vY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\287fe013ae76586882fd44ec05ff1790.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f71ffc8c119661c77ba47ef442234b09

    SHA1

    70744482849c9365596c501f440b0073576883c3

    SHA256

    c5b5f44b2a58747f7f31f61bdfebb37fafb89985d36ce59be41d46263c01f0ef

    SHA512

    d2cb37d2c5c0bd1eb92b472b9b065f6a061292e64a0a9b046c21b65fb991913f00d7b6b2f10fb7007201a55edeb68139a2b298acc858b6c9eab20647b730474f