Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13-02-2024 02:23

General

  • Target

    983d5261a6d5ca58ce94fc646ea1bd1d.pdf

  • Size

    87KB

  • MD5

    983d5261a6d5ca58ce94fc646ea1bd1d

  • SHA1

    faf39b5e461b846f9aa3ba7fd3bc70ba447ebed3

  • SHA256

    cf18504206be204ac9f0cdcf9dafcc974526a4a2c6b0d24f500f6b7f2efb7201

  • SHA512

    fed8466134b99b7f5fa1c153a0c20ffdfb6f74266bec362d938d3f091538e55050331363b519efd8a9b4e42cee4a1c9237737e2e6c1b607472b029d4134bdf4a

  • SSDEEP

    1536:T+CPC/1yb8OJNSNJ3kdSQtVBDMcpaRqsx3ysGNMRSmaVGBZohHwWkNpOPqH4Wlsi:XIOJNSf8VlXaRq4ysikBZOFPqHTG6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\983d5261a6d5ca58ce94fc646ea1bd1d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bb8f5fe5f94c40c403cd5f87c51e7279

    SHA1

    6192c65d2d47d0f5646b504981279676ecceb88f

    SHA256

    af4c844dd8e56badcc1500958d146b9ae59b6547a39581f4db20499342f8309a

    SHA512

    b8ab90d27c8f5c12adc16f4cab3637ca739bb520ed2b71977a63bade6fa07f7b9db47b7371b0e8d88ddbbea27ef6bd1e8beb0ff2c0650d616aee0217e04065a3