Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:41

General

  • Target

    166dd554729e6936ca1d2a0268dca2b0.pdf

  • Size

    80KB

  • MD5

    166dd554729e6936ca1d2a0268dca2b0

  • SHA1

    e80d28c1c8d839bc3ae8151dbe326a1745101536

  • SHA256

    62bcfe31aca695aa255971883b6d872908960eec298d000965f821b55f646633

  • SHA512

    405d25ddfe6adba3cc66c22a709c4bcfa76cdf27a88f879a50433eebc1c2c8babb9ed631975404aa6c0d279108cdcf3ec72c4a922c069a04a37cf7c4c99b6e18

  • SSDEEP

    1536:gbYSl5YgW9kljVEiQfz4gX2oGid/s5zWApO6WEWX7h5Dq0:uYEfnljVsknnidE5C6Wz7hP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\166dd554729e6936ca1d2a0268dca2b0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2316

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          941c054c8b90a8fcc00745a39d960956

          SHA1

          ff953129c8487c2d1f3594e413b0c60255ac8c0c

          SHA256

          f8186965b552dc2de707fadf206c63622a247c57d6fdc5f2ba62b550d3d05c80

          SHA512

          823b452f1ed5a474bbaf94b4ac3d69a7e5959802d9f49b9f0101c995d29b1b01ac8ed9487d67d4e6c1b2dc44c74a035941d47683707b5c9953b2b5168e8b1b19