Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 13:13

General

  • Target

    377b0fc711ba1ea0d30d9fb8a925fbdf.pdf

  • Size

    90KB

  • MD5

    377b0fc711ba1ea0d30d9fb8a925fbdf

  • SHA1

    341dde91ec6308e5967c0ea2d3652383db00af1a

  • SHA256

    09d59fd7ee1a9e4d67c68fe26911bf12f4078ef9384f2e6d45f2d07e42ea7680

  • SHA512

    117462f56d7d9c01c46f1b02008f16b31396942572d62fd2ea01f03eb141cfefeca9202c63b93ec868d8f16b1d93eb273bc3b6abb9ff8e896df3f02caeb80581

  • SSDEEP

    1536:Kb8Bv+e+nevuzx9vFdOZPkgpxvC8gIlPfkxvthWYpO2+W6P/PGKzI3dk6:7GemxPRgvC8gIlPfkA2QXGlf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\377b0fc711ba1ea0d30d9fb8a925fbdf.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    067df4631bd2c8159f8bffc7164a22cd

    SHA1

    ee2c0e4cec810bbcb3f43180bd7ac7cf7d1df4f1

    SHA256

    ea33b6ee1767bb02fb14335c39122464ea8caedda662f7da5e95c8f73e312311

    SHA512

    ab652b47fe69349a3d5732f85f3d2186f6f98acd65072e903ee899a4fc3dfda3990d35c58f9d321589f06486a6805282e5840fba3bf82d177c911556a546dd8c