Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 05:22

General

  • Target

    29d42a0cf9a1534c1f83345aa0892d79.pdf

  • Size

    73KB

  • MD5

    29d42a0cf9a1534c1f83345aa0892d79

  • SHA1

    6ea7b6cb302ee749a6a9e279b02c9a8dcb1d2a4b

  • SHA256

    d0cfcbefef42f3eedbb4ab96b9d70ade1d87a7e2fb1986535e1de47dc0bebc68

  • SHA512

    f3d911f3f57791e236b976fb1c4ed6e6da6d9d91cad8fa1a53f3c60b1fd9e7ae076ab1f50fc6100b1ba4074e996bb39a4315b9c24cc88dfe01b7e796b8f2a0fc

  • SSDEEP

    1536:byVQLkP0BdfmIybof7FqRAvgIp8hjfwmOC8aSiyKQY6TAs:8NsdfmSDFqWvLehDwHC8amKQT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\29d42a0cf9a1534c1f83345aa0892d79.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2848

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ca7621052fd70ee8d19f0c9812abe9ae

          SHA1

          56acb72f28225fb1be5268a2a199a5adb3778ea1

          SHA256

          c9dd05c44e27604157ccda3de2fc0d113c0c7916734600e4f7b0b93791bc218a

          SHA512

          9db3708afb42fa807a1385e14dc0edec25971ab1e95fe4c5876c24eb12be0ba761181b22cee313ca05cd72b21c492cdc714050881d2abfca5f47c4514e37be87