Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 04:38

General

  • Target

    65944cb2d0a2128eeb19ad084b866115.pdf

  • Size

    35KB

  • MD5

    65944cb2d0a2128eeb19ad084b866115

  • SHA1

    24fe3ed9490359358170056d003e88652e2150ae

  • SHA256

    b8a6be6d946ab9296e605a9d2b4cb5f3b346e70c9908073331e65f7ad9657de8

  • SHA512

    bdb44d42f197bd046da2085a9b9ca38384eead1423ff56d2b257256a1c1471b2cc4b4285de25f15f3fae77fe39ce6cb2811a7f682c81ab0f5c4dae0ef4363157

  • SSDEEP

    768:ms2dyCEDTjBDvY6XZsUKv545/I5x/RqCG1qTW6WOxwG2unw7:b20CAq6GyJ2x/Sv6WjG28w7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65944cb2d0a2128eeb19ad084b866115.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    14eb5f567899408692c3ec95c5cd6375

    SHA1

    b13dfcc48a1d2f9562ecb7ad6cf9ddc6794725d3

    SHA256

    9763f0dd928cfa10579c350a0b0263519af753923b7057cc50c66c2314b646ff

    SHA512

    fdb5932ac59c30e0bc3e6abe085849c1b114b2613c6e8eb60f75fdf9ac55519d44a6bd0febc48c859f8ddefdd3b00b92b4364bf1bb3564f19ea42b0b9c011d3e