Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 14:26

General

  • Target

    1b641e00614e9a93212e2d71b78f20e9.pdf

  • Size

    91KB

  • MD5

    1b641e00614e9a93212e2d71b78f20e9

  • SHA1

    6417bdfe79944b0ddb85e7311a9b2edf68bd393b

  • SHA256

    05d9cf0b21ed95bd03e57b07f2db51691f2e7bd2858c49fa671840fc7b15dac4

  • SHA512

    baf3c1ad15313169ecf4f4c1e13becdc0afcb0f149231d32ced608a381ddd9828846db9f99a92d2a19668384057b153802b14a5dca44740e2fb00d8e887a5036

  • SSDEEP

    1536:EpcxgZULBCIBQD/naV47kqU3L4FO7vWOpOaZQw/EW8gkaNQdkv:WZULBCkFa7kqUHAaZQw/wgkWL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b641e00614e9a93212e2d71b78f20e9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          60d0fe8e42b7e5f7b790b2fb2e90b209

          SHA1

          4557547157ccb03ef7bba9b11e5827749493d87a

          SHA256

          02c574a1b709655bd6d8ea8223d24f16e6bea61df1ca1935ef24b04b99d69d58

          SHA512

          e5c7d997b6a433a4bd6532e9a4437b71dacc9db5fc1917dc0f248d0e3dcdb3200fea069c2a5d59f5b77fd78a1345a8695b3856bfbe4febf508a320e1c3c81e59