Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18-01-2024 00:25

General

  • Target

    63fffd3e5173afd9c822e1370a882b6e.pdf

  • Size

    74KB

  • MD5

    63fffd3e5173afd9c822e1370a882b6e

  • SHA1

    5abb133ec83af715c59540ada8682394ac5e6dcb

  • SHA256

    f72f2d053850ae3227be21549259b1f602097afc5f89b66203cde1fe68446775

  • SHA512

    8a5fa0592b00afffa5d634ff39ba2c3460bd3083c907788b1ff62ae57391779d58620b70100aa85deaba3642c1037ba140c620c3d6ac1787c4828108f796082c

  • SSDEEP

    1536:6vS/P6yQsDD8e3LPe0BQayFVWoR3D/0J4oWapOtQK22LTXozlEeIXX:T36yQRe379Oj/3D/y4RtQv2Lzozme+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63fffd3e5173afd9c822e1370a882b6e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8ceaee62cbb06ed15e68bb827b581f6d

    SHA1

    d5d2dad066dbb3a2c5c27edd10a19cdff5827688

    SHA256

    4ee7c6e91750aac68733e8ec780148134c28a410249035b22f0d2be2ee6f2e3a

    SHA512

    353d71228a2e2a2f26c832121cf1aa3dea6f45193d30263a8c8d425600b027c881c4553148a7f3d6018954d9f33e6febb241333c652de3443b6be81d5fc7bd76