Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01-02-2024 15:10

General

  • Target

    873352e9534694443ececa019cdef969.pdf

  • Size

    25KB

  • MD5

    873352e9534694443ececa019cdef969

  • SHA1

    1048c04bf082e389ce7bf1aa49b5232cda2eb470

  • SHA256

    40790008ac40bde851f3c3a35389ff015d88c83c1baff0252cbcbbaa79d43e12

  • SHA512

    590d53fadfa455103abae64a23107c59317ddb46c6e7e6eb26d5221ef36942fffc44035ae1f59f6cc55d72537468049c40e270214ad2113dc576b9f567dfda4b

  • SSDEEP

    384:Qm/Olbv8BQDso68LengxAiQ+Sw1if1fzclLBPeECUSyNm5o:X/Olb8BWso68inEAitBO1LcRtPR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\873352e9534694443ececa019cdef969.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    28c7fcc953ed344ee9225e684ef7df31

    SHA1

    b730d4824ce49e0f4c76fb664d823fb7aee9c8b9

    SHA256

    561b8477911c50656fe80b1105ca924596e92e1055523d85b5dadc62fd9d2a6d

    SHA512

    462abab622fcffac24cad6c01483347f7689239ee43adb2304e4426d1679891425f4e1ab253353630335135ff0314152d5b93f5cae9b38389035eea51037978e