Analysis

  • max time kernel
    119s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 13:38

General

  • Target

    38534f2bb0723bcf792f4eb0edb0e8e9.pdf

  • Size

    90KB

  • MD5

    38534f2bb0723bcf792f4eb0edb0e8e9

  • SHA1

    6b47b72eab1af13fbab46d5e4b73d202968d7401

  • SHA256

    9911312aa0df9e9741dfd4adc9e0862605b5ed082ba541f7043317a6a62be7b1

  • SHA512

    31f2eccb42e026a035d3e21fb5ff0e930acf7b8b9b678ba1bbb7c114bcdf6dc2731d3a60aa58a032aa3eabc0a778d7b64994dd7cd907f2a1c6e04d98b56e1a61

  • SSDEEP

    1536:blmUUlZ+/dVhYMkg3oapBxkTnWakiC03/KYFgziihBX8dujoMrhqWbeD6cjPWMro:JfUPAvTJtpBxkTW3ixNFJihBXqp0hIlc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\38534f2bb0723bcf792f4eb0edb0e8e9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9465c6498f67899498d1bcc0eec63378

    SHA1

    b17254f6c1dfeaecea7a32d0fb4b197c16a70008

    SHA256

    036e16e1c15803462e213b8e5d3cb1d5f63a44de12522415bb1d62a476931a64

    SHA512

    c063959e393dd3ff27fe2e2d9c29a93148dc03c7657fd989e7fdaaa6e52e8e113013fec4c66c30a4163811ad15cae074f2f1288946c1b9c1f3dc68c317e84dc1