Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 13:22

General

  • Target

    37d0d9820ad4b1458ed7f849879d7a62.pdf

  • Size

    35KB

  • MD5

    37d0d9820ad4b1458ed7f849879d7a62

  • SHA1

    db1ece9b14477cd1309ee8a8fd3ac31a5547844c

  • SHA256

    0454c767554d8e09823fd8ed3442ed6f30ad76076fa76179c63df0672df66c79

  • SHA512

    c836407fd629e0c4f8e9e8315ca52b2775c29c749e6cbf1560504748ffff0dd153e3d6702f32c4f180017ed65106c40db3061a740b0f1cc1f0574d0a8c02b5ab

  • SSDEEP

    384:IpHCntHMBIsT8Ka6J4V/6yzQNvXqBa9zvlfrLBCUSzg7r/RpWbHhkfJLP8HCUSQ:IlCntHGIsPzJ4V/wztFcsKHhkBzCN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37d0d9820ad4b1458ed7f849879d7a62.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    437ff10a23a8348e815aa258cb9f2b32

    SHA1

    ec869cfbf295d507629314c4e4366ed51545e2dd

    SHA256

    4ba60a86dafff29a4659b1b947637ee9cafd28f1c46a5936e308151353679cb7

    SHA512

    976825bb2a8571809f8f955bb88a3539dfee754683b4d7e235d751460b0d44d1378b982606699626e2470a3fb3574a584965e876d1ae155de47ab4e4cbf728de