Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 11:27

General

  • Target

    65426bc14829bead28c469d180f71354.pdf

  • Size

    82KB

  • MD5

    65426bc14829bead28c469d180f71354

  • SHA1

    f1ce2d029b75765554778abbcb2347f4df59865b

  • SHA256

    699c1aec26c0ab7be27be5a534b388172f291acba6064d741904e5d163a05314

  • SHA512

    f17b9a6fffee8d4edc0e0955e942f9710f93f3951a3ad65b8309a58c79303498cda2e7db3293c2887fdf6a2547287f94b2e1717d210306943df76cbbafce85fc

  • SSDEEP

    1536:CRUs4IAZ1XQTTsZE2cg2i8slGz9YFAjLMnniQWxKxD4hWF81hWapOnqB9:p0AzQTD2cgv8Rz94AMniJKV4pinm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65426bc14829bead28c469d180f71354.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1667436bf6ccb35696c9c8f2686946b1

          SHA1

          077b5eccec9a1c0a2334b043a4640864bc6fd8f1

          SHA256

          6db45940b9dfd0849b88e75514216df2ba68a32342e992a6e19610d7dca41fc9

          SHA512

          b81ad721edc09fce3365c717576fb79de22085e0ed2118bb6904edc6301be6fe05f5cb6bb1761394691eb399b45db37c7073ff3df63a4e9f0394d4a989323162