Analysis

  • max time kernel
    126s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 13:58

General

  • Target

    38e7a424ef9860df3c542d5328d300f1.pdf

  • Size

    88KB

  • MD5

    38e7a424ef9860df3c542d5328d300f1

  • SHA1

    4a81a9f6be3cb5325107cb1e8ab5f908137461e2

  • SHA256

    dc63dcf05c0dff435bf8307773bb487cd69fce9e839da6823c58d4e13bd8ce5d

  • SHA512

    cabd2a162e222e9909457a51424f060af9ef942c00ea894d18a990310d55e8f540ca8163a0a8eb0d93970fdc84a0dc971885a761749ba56326f39a8b1fc972a8

  • SSDEEP

    1536:dAwB8rXhNi1DKX2d5rr9ie0x9SlvFhHYqUoxk7cxWtaZy04zvWUpO706i:uCcxssG5v9mxOsqbSgMaZF4zC7c

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\38e7a424ef9860df3c542d5328d300f1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d1dbbdb2ac6cf503367fcfd62761bbd2

          SHA1

          e7aa92581666b3625f4a33d028ec03e9be04d29b

          SHA256

          685f976fc8a38e7524fe5c6935503874f6451ed57fd484ea99acb8e9dc58be87

          SHA512

          30273b08f3d28ad770ae9a0209888f06c0cb6a742fac542f4b5f1e32fd7df4fec23ae34201544847a7797bf76d98d12144333035cfce96eda22059ff1dba8fed