Analysis

  • max time kernel
    119s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 13:03

General

  • Target

    372b4ada5cb5fa09d7dfe45514f2c300.pdf

  • Size

    86KB

  • MD5

    372b4ada5cb5fa09d7dfe45514f2c300

  • SHA1

    813eb7308ac52a42d2d70817401d778c6d2cacfb

  • SHA256

    b3a1df1f6d88f628fe4a3d75ad724daa53c10401a498904f8f6d34fbdebc71cb

  • SHA512

    c5b75bad4eaf7894c4dbbc449ac9dbfffd7ab7433bce2fc35e7190531a2e4b03eaed767ff7504e4f3d0217d17bdb39eec19ae627ae0f38bdf93ad930222d7c09

  • SSDEEP

    1536:hcM1HEmUFwqdroD0SJdXSUZM/dstgB8U38y+Y+JWCsoLp3n3WspORatC:+MRKdrojJFmdsgB5XQQoLp3nmR9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\372b4ada5cb5fa09d7dfe45514f2c300.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e886cbbe9063158ee88de4b22ab4d9b5

    SHA1

    7af24cdc2009ac69c8dd8290a53b413ff762cc64

    SHA256

    1c30cdd0112f94b4f634ad29527685ff6bd1408321f659fe502ffa03f919c4fb

    SHA512

    ace8282d3505fb86c24bc0435e7a1ed958878e1b8fec6d58e6628e56805b460edf37990b43fd2083fbc99f1a8bc736f46593088dbaccab59df703721cfbc5fae