Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 00:13

General

  • Target

    2144bb90c0cdc6a57e857295d9557d23.pdf

  • Size

    88KB

  • MD5

    2144bb90c0cdc6a57e857295d9557d23

  • SHA1

    5a7223a4e2051e6ff9e935a01570adac38aea342

  • SHA256

    16b9ac31443190e1fa97b4ec6223e7b1fba5690698ed9cee2b19a380224f64b5

  • SHA512

    324db26af7f3caa2984f387051637a8620a84a545136c6acc1aeceadfb0faf3269b2a6a89c1d2d85519c2940ff4d402008db59ec544c6e1e9d589631a90d3deb

  • SSDEEP

    1536:pPNw6/NCkQBvb4Fbb14KAUfsy9ukaAd8ZnkkivxzWypOlLpdV/KjhWrGJGq0QYbo:BNw6FCkQpabx4KAUfsy9uaelkkipslLI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2144bb90c0cdc6a57e857295d9557d23.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2160

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          62d924cebcecdabd26d8983aba60065d

          SHA1

          d2b69cc65935b9694022049ede2bdb837b2c0765

          SHA256

          0bae6cb809eddfaacbc7a637d9cdf8b899e9ca06e59037a49e40eeee5ac40e79

          SHA512

          90fced1fce32d2abb9fb49c746ba1df79815105364c19cc05fd706c646be22816f83ef3b33f24b9ddda0837b1e983a33386380453e13502059af54bc59b87129