Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 13:20

General

  • Target

    37c505e6fb01c08adfc751ed201cedea.pdf

  • Size

    85KB

  • MD5

    37c505e6fb01c08adfc751ed201cedea

  • SHA1

    36efca4ad4751d307761ec096dd4c5a5ccb17ba6

  • SHA256

    95f8a6bd40da65d6cedf4b4b68fbd8e61b71c37fa2bf95ebf26404eb4bd4def9

  • SHA512

    eeaeb13babcddf34e2892188c5f188677f7477bf4ba6a52c7ff779f6fb80e3aa97f55cfd83ba2b7a51fc35c91ec648b040ea4c38777bf43dafe80ecfe25eb00c

  • SSDEEP

    1536:lN8M5JH/YRQldUEpmcHhGJz9d5r0vkmLirhRfUTF2WRWQ4WGbbH6exYgMWspOS9P:IM7/YrEXgJWMl38p2oXWbH6Y3S9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37c505e6fb01c08adfc751ed201cedea.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1520

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          14205c6231ffcc343f4a5f0d8191733d

          SHA1

          fda464de5c4958573995c9ee8a02783c2c1a3ab5

          SHA256

          5e313714f39c5202280004bff2c94aca2c136fa56c303cb0713a0ab69b6c14c0

          SHA512

          f3970a2c5b534af1df61e1823645e60d5f95262fa73e0dc55564f0ae8ee7353c9881224664e973ef6e576505f9e59e56e22db0f757bb85615665845ffeac633a