Analysis

  • max time kernel
    183s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 11:57

General

  • Target

    17bff72630a7f6d9cc27e6164de9e411.pdf

  • Size

    86KB

  • MD5

    17bff72630a7f6d9cc27e6164de9e411

  • SHA1

    9ec1d310cf570f9bd2e7a3c458a1e208e213d8ef

  • SHA256

    05fa27782b2cdf40c801dd06bdfdf529fc26d9c9a3c3d1e1417c9c6c92f753bc

  • SHA512

    276d7ccab7bc393108a8443ff2fc1d3e8a86052f854eef62c197e9c078c31c51b268aa0e07e0c03c72bd035a87bdb59288665dfea075bb1b7027bd30462fe862

  • SSDEEP

    1536:QJwT/iCs1gxzzWOIVKKAIwdK8PrFO2TakYXPDPM9v9KWypOlWWxt8qjMrZSUTG:QiDnJx36KKTwgors2TaXbe1lDmqjMwd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17bff72630a7f6d9cc27e6164de9e411.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2572

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cbcaef8f6b674ef9585075bd0ba27710

          SHA1

          5f9ba33a30b3e0c360d5933332f67df1075efabb

          SHA256

          f204218116393b802711d4312e78f3d1519bc6fde92e184b31e14409c82d5798

          SHA512

          04eff3a1e97b2d1fff6a32d2d78eea4fc1f9b451ffc29480a099839e8f15a88e6837baf21c8a815ab2116dac75bdf17c32705eb6628b22192d89d4c132853625