Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 13:51

General

  • Target

    38b60c8d52bcee11dcc6ac3dad8f9f15.pdf

  • Size

    71KB

  • MD5

    38b60c8d52bcee11dcc6ac3dad8f9f15

  • SHA1

    d96004c09c8491ef8a745499967ce84bdf0b5798

  • SHA256

    65371792189b7273aa59874c1e5d64fe013cfaf0c4f8a016f923895529b1ff88

  • SHA512

    217c98ea8200b06b25e1e1365469e087006d93f759ee77321be193f0a9d0cb641a698e1461e4f485ebca2192b04b62863267a1e349ab0f25c0e5c5b5f2bb8a75

  • SSDEEP

    1536:FgvakgUmTEOTaS/+Oe8lsmIVTXRGp74ZGlrlJxfQ/vykWq:2vazoOTaS/+O+jhXRGpBrIiu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\38b60c8d52bcee11dcc6ac3dad8f9f15.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8e3ad1abed0bee9d13bb166f963ed882

    SHA1

    b252b44a975d58ce8ff0770eb72ca262e29d8c98

    SHA256

    71847b532703a1803735d480d902937af522cf7a7db50574bbcc5d119176695b

    SHA512

    dd9eafe4e983f556e24dcf988d9bac5cad54413f7de16c40c64b852b301078b84b62659f1bdc71f125d29f952aaa2f6072c62e3034d3d7a0f13a663e3181ab8d