Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:39

General

  • Target

    162e70e57f517693172eb4d22a0a1b6f.pdf

  • Size

    40KB

  • MD5

    162e70e57f517693172eb4d22a0a1b6f

  • SHA1

    ab43a2b4bd4c7f9e407a1a00c3c6a7f9e039c07e

  • SHA256

    705c41d8cdddb9b2fc6620dc4045cbaded63ce9614a396b51b21fe61241a470f

  • SHA512

    613c7b6e33a2552b002f79ee364c0cb361486ff40656f53f89bbefed87a142eebe48a7af8bf3233faa4a5388e70a28dd9dba491569ae9674b393aeb345bd4ad3

  • SSDEEP

    768:+RWBeZWU1O0PvihrypmI+2h0Gkb+FSUEgaTcjfLLqf+aOR4s:+EB0j1O0PvyPI+a6SFnaK/qf0R4s

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\162e70e57f517693172eb4d22a0a1b6f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b5d700f458549072151a200ea79800a4

    SHA1

    cb8824656ee9ed7f4f729afb4b9e22a45b524738

    SHA256

    f2c22d0748b8e173411c72955edc14d8630d7d6751f6472d72213d1a9ce779f1

    SHA512

    59e17e05481eb850078bd4313005463cc73da8d2f72d037f60a075ef0cd1396c1db0e2743bb760bd6aea0e9c0ae3b92a9ddcabda5719570755f6a4184f55ad81