Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14-02-2024 14:17

General

  • Target

    9be59b3cf66b8cb45da59a04e6f97c4c.pdf

  • Size

    48KB

  • MD5

    9be59b3cf66b8cb45da59a04e6f97c4c

  • SHA1

    31dc625a558c6ec378abcbeefd137b0fd75cc40d

  • SHA256

    15eb58bd7b88b0d572764a23f4223089299a52b99a6d98ecdc590b8077f6ede2

  • SHA512

    e9d438f160c1917d5636f47acab6625fed992ffb3b6c7cacf5115297cbfc7ec515a1d5c1835eae8b3ffd9dae2e91b9495036b22ec8f974981dc43f56caa332f0

  • SSDEEP

    768:6EHAQYcOsIZcVFY+AqUIMAMHWxNUnVB/3ZwQPKSKjPVHY3BnZmZ:dHAQYcOEVTMzWxN+VdHK3Z+fmZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9be59b3cf66b8cb45da59a04e6f97c4c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2fe6ad447ec5b7b5280105168306a2dc

    SHA1

    f8d93d0a8efea5661e0d9b0efd82b215aacf5f8e

    SHA256

    208a15acc4008e5a87ec4bdd2f36c2f95131949e22ce92e36574f55f5d3e0357

    SHA512

    6bf424163c26daaf33afdbb6d61660a2723510ecd48620f9b2b2da41015559839d94d4807c565e2b93189a3f9294bfea4b4becb25c2293128c134007dd8be01b