Analysis

  • max time kernel
    118s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 10:50

General

  • Target

    166bba0c2cfec07dc9f0b255eed6fb58.pdf

  • Size

    89KB

  • MD5

    166bba0c2cfec07dc9f0b255eed6fb58

  • SHA1

    3de86f8ea40fb02fd5d317d966274e4f5363a6f9

  • SHA256

    4db1efd276711bec14d7cc320990d328c82bd8d256a2c7b4a039ed94f572c3ec

  • SHA512

    2600b60cf0c530d4175f0cfe604d11f5eb8cb99866a24894a2ad5cad17798f13bd9ab53e35d9ae2fe08a83e97a6c6385de63ec463b357119ef6dfa8babd91eee

  • SSDEEP

    1536:/KT4cE3LBiCv6pKeYUwF2s86vdttFmU2Y/K05GNVwZQk9GroUWCpOViIW7wla/DY:Ccc813eBsAOp4V6GrodViUlarZTiH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\166bba0c2cfec07dc9f0b255eed6fb58.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1964

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          76d1fbcab450d8db84c213fd9761baa9

          SHA1

          ae70cb0968d49d980b1587e4b95ff1bd6f7f1e0b

          SHA256

          5e7cba8ae077a38f322f78f4d60cbfae42d53500c0fcc5437040d6e2913f6322

          SHA512

          65d6c056fcb3e3e85977091dacdb772596d3dfe894ff7cdc387c9fd88ed7c18e71afce97baf213b384c4c51e31e37f411422a32f5958b82615a64d04b35cc0b6