Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 10:42

General

  • Target

    16424f54eb7702e04838ad7b20c2c326.pdf

  • Size

    86KB

  • MD5

    16424f54eb7702e04838ad7b20c2c326

  • SHA1

    2f10016457f6a37e9364925da6305f26b77aead3

  • SHA256

    b6c2a3f7fc13939eeb1e2df06e1d26fb0372501fbf5966aaadf4df2ecc520f97

  • SHA512

    eec58d42be555d61ba215cb65403f7ae1664349bbe7636abf53e4bb282748b8570df5025cd7cd26bb575b2b62ca9113a58ce54def4a2055b7e3dc9476fe823f4

  • SSDEEP

    1536:bA/phIU3LWguUTOhHfDXO3i/0f/XBIkluNM741bVKkRQG4LRCCWOpOwrKWVJ30mt:UghOEHfr620f/XBvENM8RKqr/3wr5Emt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\16424f54eb7702e04838ad7b20c2c326.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    48edc671dff5fc775e302839f134d59c

    SHA1

    8e3c908865f53b54153edb563f0e53b16adf523f

    SHA256

    551370073f2f8c8f079ca3a5abb05018ebfa1dbec019658fb3f4ff7f5384a36a

    SHA512

    3c5cea16103c049533523642d380de07cad367c1b9c66f86f2531ffe09ffd61ccbe69324518e82b98c44b3d61fd1dced63c4c612a4cdbd7f693f121e5b62db20