Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 12:52

General

  • Target

    2966616bd1b75c6e4255bf1370a1d705.pdf

  • Size

    83KB

  • MD5

    2966616bd1b75c6e4255bf1370a1d705

  • SHA1

    790f7a634bd3a00dc074e00fad35d6b9b19be071

  • SHA256

    d5788cc256da06222ec5a234ef3e001d7712b22211a074b24b2654cb971c7371

  • SHA512

    b1fed2423234fbf99f4387ed8532b97831eb209f51dd5c4e7749148655c8f16e58f1199c4750a83a37469a22e9c2085fc5e0852dd6c75ab37a1717c26d8efd5a

  • SSDEEP

    1536:OyTbyCK87UXnJVB6+bJBBvzXe1JL1JGOFHpgd7WwpOS9WGikcULTRdk/M4Z1An7D:Mp87n+btvze1JOOrgMSPiAh4UnH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2966616bd1b75c6e4255bf1370a1d705.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1328

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3e7736fea0663c703c61ab1c2808d20c

          SHA1

          62ef09dda29103dfb3b38c2b05c04beca1958b2d

          SHA256

          ed7ef3b375b4393cd0fb5946b2543abb7cc48954113e8163d45d14c6261c5c59

          SHA512

          3debc60197645fecd7fc609b55b762cffc66fd84fb81f7ad1da53b30eb028e05ea7d778a2aac2bb20d653e4cf35c24c52861c16c2b8b149ca46254dbbc7206b2