Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 04:50

General

  • Target

    67dff0f33c2506ed3bfb716455bb11e0.pdf

  • Size

    34KB

  • MD5

    67dff0f33c2506ed3bfb716455bb11e0

  • SHA1

    2a13aa58ca0c78aad1112d7bc746cffbee408c8b

  • SHA256

    11522b285c6b9909cbf4bb0013b2a91db1010fdfc9b7b3d069d0756817b4b5a1

  • SHA512

    0bc50b231c59e01c32733777d051f49be3e21f7b7b5fba9de9ef5eb80a282ca9e5f5bf4b2f2a5afbdc1594d597f1ac3cfd696ab54133f0af7a79a88ecfc0301c

  • SSDEEP

    768:0q1Fsl1UD0WX9Pq/sYp4KEhs8f8p+4N5i582aQuc/ZTBmuNwEP:NQWR4L2zo+2iXxt/5BLOEP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67dff0f33c2506ed3bfb716455bb11e0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          dcf6ba8d76bcb0f728756e12e61478f9

          SHA1

          f537653c53099f722a0affe9464d2d0b05fbcdab

          SHA256

          3cabcca2c708d813a5a83a261e30baf9980f551c63ac5487aa79a6441e4e84f5

          SHA512

          f4b347d4b1b2ae96db79391dcaef964695684c27d8555e5ed1eaaf16291480abca86fc129a037867abc3fff4c352e63d1d5cf0a06e8e85ac690267fac54e1f29