Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 11:04

General

  • Target

    16b330ca834c582c3a6be57b11385281.pdf

  • Size

    81KB

  • MD5

    16b330ca834c582c3a6be57b11385281

  • SHA1

    e9535f7985f0b5051d241250f68ae32599c0de85

  • SHA256

    b4f26a18b6ac9c0d1ce4d83c1b504d07aaeb997beb9190c8485f832ed8932a42

  • SHA512

    ecc53f16428fa3155e42ea34d338b0488ea74b9ae8b7331b59d2d314b37ae3c639ebe4322976a47fccb97224411239d33c618907cd48a6ae66c21f5ecf27ab33

  • SSDEEP

    1536:74+MjtqlKsCxzhW96cYPVCzI6CSOdsRi97ezWOpOwrKWxDjoSC3DvitFK:s+MZqlKFxl+6cYPozB1RGiQwrbDjM3mi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\16b330ca834c582c3a6be57b11385281.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5170a04f72cedf87c568b4afa62931e2

          SHA1

          f56cd4ac4f797b4a32ac3d30de9ee4058be4d157

          SHA256

          f60359d21404f34a0fd9e40cc7517d17d801c0709a7869c01944269bb48fd8ca

          SHA512

          0d12aa6c99efba9ce11fed8c872d8f519f0d8c0837bf78a23b500bfbc800f842b9e8407ad832d48ff234e3732424af79a535755f1bb60978c5568ce10fb29e5d