Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 09:30

General

  • Target

    63ece4f652b19efba138223c1c96adee.pdf

  • Size

    36KB

  • MD5

    63ece4f652b19efba138223c1c96adee

  • SHA1

    7cfc6706abf238790b2cb82a5579b2874e7b0962

  • SHA256

    4946fdcb3fa2275ebedf4ef73dffab1c4063c3da90e8c5e3924b5800739d0f54

  • SHA512

    6653d1f600e5e0fad803bf60799aaa426b42617e05d6b9e6af9a971525021a7ed361b02cc4563f6b19c2f9abfa8c2f9bb3e5637bfc1ed74681a964358c520034

  • SSDEEP

    768:OD0T3C+BpEoJrDSj7Pqjhzn+Qx6fAejqCJmWivlnC5v/yMg3wUEUyoB6SmBM+rH4:OQT3npES2j7Pqj5n+QCA2DmWonC5IwU7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63ece4f652b19efba138223c1c96adee.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    03bb3a1c4dae40b096cb34fca7da4c3f

    SHA1

    1bf4090af88a16f9c3fcba70caa371ea545d66c3

    SHA256

    75e29f592b8ce7effad1963ffd7fdfed977c11bfac1b226c38320e695a897031

    SHA512

    aae6938ff1d6a02d8555e9faf707ae47dfa5b93459d4b074326b5d927da2697dcb9fbd22f3ffe93ea5cb0012199e308500a6668040d2100f570fe0f2d356e814