Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 00:11

General

  • Target

    081b658eee9742837766ec3731d6ef83.pdf

  • Size

    88KB

  • MD5

    081b658eee9742837766ec3731d6ef83

  • SHA1

    1c4f9d8dc32817f43efb8e0d01ac184801ecdec4

  • SHA256

    3b6abcfd9a51a81aa691f9a8c03e529b6c6eb924e491ae623b88dec57b8b0444

  • SHA512

    4b81555b71f1fb93bed9e5efb987ea092ec75125c342141098e047f312ca09f15fb61fafaeb2321fd56b27ccce854145cf641e77ba071d61979640ae8a7b279b

  • SSDEEP

    1536:BNKUQX6nqHlW8zqaXXzqmUnyEl9z6ZO8ECOjOKqWkNpOP9oI2EHIFWHt3+8SH8:oKi8SOyEp6s8EDBvP9oIfHt3+8z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\081b658eee9742837766ec3731d6ef83.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6d193a870fda2577ccccadaa3d69eac4

    SHA1

    b8d7f942da73fff2522f208de580bb4369d03aab

    SHA256

    a5b7cc3027f44c7d1327e2ec78473c212b6a045b10e4d6e2687c0dd2b5266d1d

    SHA512

    9eb55860298bcc4ca4dac119647299f411c876a6ddd1574a9075b0ea352237be1e1b0f0150189e1514176f6c888360750712a7c415d1bd64c7d946e2223149ff