Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-01-2024 19:20

General

  • Target

    686e89df832e8eb14b74ed342a9f16ae.pdf

  • Size

    87KB

  • MD5

    686e89df832e8eb14b74ed342a9f16ae

  • SHA1

    37909948b42d7b6ded8d2cd06507211f866d1463

  • SHA256

    8b379d310ed0d06c40e67a4af0d3c8d132895caf98e412691e2d814d2a649529

  • SHA512

    41009860e0bdd8c25260b7fa11b74a9fc37ec64cc01798e5e4c5665b1a199d9a90f0b421c60359583770652431e6b54db6acf0c3c5e7d94745f115a9b6ecbc38

  • SSDEEP

    1536:HzDIDvt2bk5Xn9f6agN/9rzctofH2SZT4PWkNpOPCjoybWbCn2KtmRW1S:TUDvtukVR6Bl9MtofW0HPsoye+JoRh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\686e89df832e8eb14b74ed342a9f16ae.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b84b251f83823811caae0c18a5d250aa

    SHA1

    c45980691c741c57b420beeb1d852fd88557d0ad

    SHA256

    4064a0f4b39d09448bd0d7d55a3312ea2c623039310a5734a03f0b5f12a3c735

    SHA512

    af8412d836e3074922271249c2118b1ddfea02c5d84005e8b3fd1e26d043eb0b76bf9af519027672c4552360994ef849975b37ef7e62f47826e6bc948ab9c590