Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18-01-2024 11:19

General

  • Target

    653f2a4348b2b97eb2a3ee536749fa31.pdf

  • Size

    96KB

  • MD5

    653f2a4348b2b97eb2a3ee536749fa31

  • SHA1

    2e26d7a328a7fa8cdc3e3ebfa1505f0808483550

  • SHA256

    a1bea827c024ad80d35383c60716aa2c04024c6097c0379f2803487588975176

  • SHA512

    947d217da7ed6a09d52a211eda86ed87d5b5b18ac15f334735211ac61df505baa0077554c76a5f9ce26647b3a25b00533c4f3e92c007a376ef4f9aff0352d1d8

  • SSDEEP

    1536:8WcuPcIFxqBooJmQE9TC77NLRwYOQTdXTcgMhxh1olTYGsfXoeo41htO46xvWHpP:kuL2CC77zPBdChdmTsXzzk4gtvj+kOqI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\653f2a4348b2b97eb2a3ee536749fa31.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5a05e5fd2f2105c8a2d40818f849f826

    SHA1

    e1a923e2f78587db7f5356af1362a1d4382ea0f5

    SHA256

    6bb7d2a1033e59af2659e41e502633eaf32d5621b5d9c168436d8d7cecb3888f

    SHA512

    0535e201a61a87d2086a8d68fc3729d1ea2c5316784f9019f23196a88f4c51c2cbb7c154ecded0d4c04874ca9e4f97172a412e9a227f3cb1d8183556cef645f4