Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:41

General

  • Target

    167d688d5faea370eee6ae323ad68014.pdf

  • Size

    94KB

  • MD5

    167d688d5faea370eee6ae323ad68014

  • SHA1

    ffe81aae5f5a02d5f5ae523eb956e1c6f5ed1786

  • SHA256

    ed7ee8e9c4ce939cbc5d1d224dfe493fe5fdf8d3883fa1cb5b675de5632b09d3

  • SHA512

    4bbd66af2ad422f1e1f6d224e4bb8514c8ba018cb87dc7b3b6fbdb18fa833af896485b9f04939e611b87aae1878265affa3e3740fba232ad398a06a400564b1c

  • SSDEEP

    1536:D69eDiwGpHN7xwRNnphdv0BjgD/X5NO7lUCz93go42xWg7NZlHROYWkpOTB8RH:NP8tOblgjgD/X5wRUcw257NvHALTm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\167d688d5faea370eee6ae323ad68014.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1700

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5375a586b070f56bcbe630399b8d3edc

          SHA1

          73f55928d93842c1b6e1e079a5e98002971ede7f

          SHA256

          21a5414657ad61788525d3d75939f17d1dc9e51f02640fec405d1049bf3f68a5

          SHA512

          0bc05304aa358a6a37e1f5b33cc559be79d0e222fb6dc8b39e3f0bdd97bf228054064ae4113880af121974178a857acad6a1d054dbfb5efe1f0bd1ece374e4d2