Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 04:40

General

  • Target

    663fefd0ce47439c621f3cd3d493c6ce.pdf

  • Size

    33KB

  • MD5

    663fefd0ce47439c621f3cd3d493c6ce

  • SHA1

    24966f0bbeb64f989226eb36da1bf425112ac2aa

  • SHA256

    ea93aa9e3abe5e0b8aec9c77510a73d14b1ae2fe7ba31e717c5e5c9f7282e106

  • SHA512

    dcfe65d5bbb30c25ee7c02d1ff4b524caf8493f2d7dd1d11ce7519344fcd2896c937043ffe5a530ff827712daa249203fc128f3753e72ce1cef3f40332e36519

  • SSDEEP

    768:86wqD5mSLTsLYRBbD5zvV+BXof9co1/PLiBSVoHauEicGZEqf:LFmSfb9jV+B4VcG4u9qf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\663fefd0ce47439c621f3cd3d493c6ce.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0535da52b4cd74ee7d4745ced1a05c13

    SHA1

    c226c5cd61e6b542741deb87ef0f64f9c27c6f7d

    SHA256

    4c90acf1addcb14f622f9910501f9906f4265d2cfa008f6c18d21ed3c05127f4

    SHA512

    0a26911f8964a11c4b1c5146d214e7755b90cc1608e34776206e845035dcd4401db1702ed8b21381e4a1e2700bd10a2f94295f1042fa1c435609d8f71f9a632d