Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 21:41

General

  • Target

    F13W32Virus/F13W32Virus.pdf

  • Size

    90KB

  • MD5

    abbe32401a866e6382e45b1debb6c69b

  • SHA1

    2c5be0c08fb6392a3d69b5959b8f0ad07c4a085f

  • SHA256

    6b916972d0d07ae319ef4ba1fb3dbf8c7dedb4ea667ac0aabf8d1472ce04f274

  • SHA512

    4f092acb7b3476027443ec4ba6e3c154647974cd2f1edfa96f24b95db13ec7fab650bf46a8d4d7ee0f57ffca6aa4593df78f9a6ed531f40dc795abf450fc6742

  • SSDEEP

    1536:u3rozYqnQkqXrj4wO5Hl6oli5H7CETcKiyrLYptYWeX448VMRFZmnjp7+AgC:6XqnuXcoEkI4cnjppp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\F13W32Virus\F13W32Virus.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e8af00bb2780e90795077fcfbb11ebe5

          SHA1

          aaf5c663412a56db8c27ef311d8f03b7a2fe99a3

          SHA256

          3ea478ab0ab274d0c1ce38b163a2c9d9b061cb373f022650e018b5cc6246c267

          SHA512

          43efbf32f36e9375289c61d905d0f1d2d293d9cfb4bd9f064734574d355c992353679136361fdfb662194912efa6d11cbc34ee19792731968d6da6b39056fef2