Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18-01-2024 22:04

General

  • Target

    66263e70e0b68d351e4c593286ee3f2f.pdf

  • Size

    84KB

  • MD5

    66263e70e0b68d351e4c593286ee3f2f

  • SHA1

    965f29e699828ba28727483dc921a390125a24ce

  • SHA256

    30a471a2239412af2625cdeba07cf6098bf1e3ef6b7e28595acf0e03477bafe6

  • SHA512

    83a58ae3c65ee76b40f287b479dcd63e18d91264a12c37b341b8945257874a4c743ff200e87f923501ac02617108897ab08e3728b5f9d5a7c0ccfb34c0156a7b

  • SSDEEP

    1536:GZZSi92yy766jh44WtRn5QtItnuKqucNip7WXwi+WRFQNbi843KWspORWVF:lyu1h44oiItnuKqvNipJiTFQJi843tRE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66263e70e0b68d351e4c593286ee3f2f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f0d9ab64902e4149d0aec871ea4129b7

    SHA1

    d9e5a2d89c830403a0e517c2956303e3f7871df0

    SHA256

    cc3b8b8c875f258b82153195a8fa9005fc30b26677c17a1be005559a3e733086

    SHA512

    a8b43249a99b1ff0b53b3e9da1b4cd80dbf6f31d92a0edc0d868f53b7e37b437fa8004664d39bc03cf1d26652ceb59561977f8d3071f36f8a069c268fc97e9e9