Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05-01-2024 12:46

General

  • Target

    43b80a87a0f1d3d95c12d476cd2e8d5a.pdf

  • Size

    35KB

  • MD5

    43b80a87a0f1d3d95c12d476cd2e8d5a

  • SHA1

    c03eb00830c30fe64309ce1d075797134a726d38

  • SHA256

    b097d8dc57b60d48d78e43a632c3a22d29d75087a11f227b7aa596d0af33c0f2

  • SHA512

    27cd6ce9f4fb52367fefc380d5446efc3a657919f3618181c0791cfd29654cd94f951384ffc78194d6891c6035e72c55157443de39d292130585986102e75f90

  • SSDEEP

    768:04CQ+VRBnN3sNZtm/y2vFqEGDtjszEJVzlnCroXaOQ:VCQ+VRBnfy2GDNyEJHnsOQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\43b80a87a0f1d3d95c12d476cd2e8d5a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9b123ed98dfbfcfb2c6ba547e9ca0a9d

    SHA1

    773a71f9bd7ec47f79fc4e3511ef7aa0904ddf0f

    SHA256

    a929dd04eaa5a6f681ca3f7f5c2a22990f9d1d9fcb6e8df4900317711a58ede8

    SHA512

    1ff1b3032fdb5f02363326701d3e07302a2ac2f9d3c1492090dc1b30b85c502517f09eff60a2361e6d2ac20a943e5f17b55cea177955b9950f7418733fa7f0b5