Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 22:00

General

  • Target

    af6335af87bf969b0471e598f1284336.pdf

  • Size

    68KB

  • MD5

    af6335af87bf969b0471e598f1284336

  • SHA1

    c2e0e0b70f031d5ac8ffedf588a83aacaa3c269e

  • SHA256

    f5ece595a60653a72ee04de7b3cccde8e9de0c266391c9c6ba167e9a84f4d88b

  • SHA512

    5c6f68f1152a0e8266c59433ef11566d0ce6d83c413d4212af595cace5a1acf0f18d545159d94dbafc1c6238ac3d65d99fc85ac706a7b50dbe984b1430e22e02

  • SSDEEP

    1536:sYhjg/jxmng2ZshrGmEGzCpLD1GGsthO4KmVaarsGJ0D69vFRX:H8/jxmg2uZzgLDPsmFGaaQ4t17

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\af6335af87bf969b0471e598f1284336.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2304

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a6a9b2b7f3d74f12723cce086fcb2a61

          SHA1

          073736cc968d3e4c98f4be76f87ddbae268ace7f

          SHA256

          7014925f8caba9e7e80a6ef79b894414b891f4f93514943cb4ea083aca47ed82

          SHA512

          a6dbf71fcbd4eecdd762e0c581e61f7c1247e7f201bd86c69e38ec486b0765b7eb0312d653ce3072e425b31b2e17e90531eddfff326853309e8ef7e56652f745