Analysis

  • max time kernel
    120s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 13:04

General

  • Target

    37328f1040f11eda23c2ad296f15c618.pdf

  • Size

    39KB

  • MD5

    37328f1040f11eda23c2ad296f15c618

  • SHA1

    84c538a7f16eec5eb2bbaf3808b3936cce7e8559

  • SHA256

    16ed66160430e9d8b436ceca40664bc4e1afb95064a2815775fd6fc169e648b8

  • SHA512

    562047662d2e69a3824230b9d3b34712578236af35f28b922dcdd1ee66d3434813135250640a82c6f30db358145d767ddeb72a7a660a0b33b4a71a75c481d9e1

  • SSDEEP

    768:iGNyez/+Pqzb7n42RpRxrtnAFf5mL+3Lv8b7+YJn1nqDcD0+coWGg3UdkryZwe:icyq/h4qpRjAFx3L67rVEcg9hGg3+we

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37328f1040f11eda23c2ad296f15c618.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    56ae9bb32fdac04060023cee26bd425e

    SHA1

    dc9c4e4bd3c606688389958412113701feeef575

    SHA256

    45cb2c1545843039ff097013ff20642021c09231e3042d0f4005432291221d33

    SHA512

    7d51776a8b2e621867ac31552e5c8de3a32e98c93def02dfccc5c3034e6269dbbc88a63f41095bdf58022148d3a99d9fb723ff88a4630dd76772f1e9a0ae77a1