Analysis

  • max time kernel
    199s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 11:02

General

  • Target

    16aa30124dea00ce70531c74a4970a59.pdf

  • Size

    86KB

  • MD5

    16aa30124dea00ce70531c74a4970a59

  • SHA1

    3d7a43ea1697e628d285944cf0ab3dcdd24d6dd1

  • SHA256

    b5cbf3b32e7e98a4d9c771a82065f7531dc69b65ee57825f66c3bdf296b5552b

  • SHA512

    eec0611440138bc68c74f4c02c8d5f45723f5b6e6a1f08b4eb8802bed94ab6c4468b4324e73a32f1aef46a4a598b6db0f751f1af7db560cd49d299388b2a8344

  • SSDEEP

    1536:EefNCjFpayz1BJ/tVowiS1eZzUbT7/bWtYonUrqW598UW9H3Lu/jOlWg1bd8Wcpw:ZfYCyBRVlGzU3jbIUrqWLkLSjOHHmZy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\16aa30124dea00ce70531c74a4970a59.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2676

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e0cdd3e5f8bfc114a7f155ec209fd955

          SHA1

          e1bc99723b03c0520067faec315f0af8ac5921a1

          SHA256

          d3e4e2f1484453c07f21dcce3e4d1511c6b5adcea9de87f84b367023de5a28c6

          SHA512

          2ce5e4281afd46b5d9af86966a8b8f40bc2a9f1db96a263df642bd134b77d2f3dec39f5540dffa541beacca2ad4615a02c365f35a08ba89aa9bdaa85dbdde7df