Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 12:11

General

  • Target

    6554ec6207aa56ba8f10ce37659fe7c2.pdf

  • Size

    86KB

  • MD5

    6554ec6207aa56ba8f10ce37659fe7c2

  • SHA1

    89106d8ed103c23062459a038b7140c86079e9f3

  • SHA256

    dfa028e9a951883c27eeb1abaf3abbd1bac71feb773e8168be706681f02a9831

  • SHA512

    14e33aad613a01e1b191d86e5bd991372f1795c2837f74b121a06e17f87b10d1ede2bcbf3f0eadeace1370a1237a63b73ebfe2dc39b2b2434ae35c2f68dfdcd6

  • SSDEEP

    1536:uM0carm+rbnngogW2ejjH+lNaq2hMOkLxQwF7+WTvqpAguqHNWUpO7DwnV:5pqmOnISjjH+Xaq2jklQbaMHw7u

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6554ec6207aa56ba8f10ce37659fe7c2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9864191fa56a7ac2043e5dd8445aac0e

          SHA1

          a15c3844c7f04dfa1f46041ac3ba4e5194404d06

          SHA256

          439443fdba3e40c7e94abe851e3324fad3491c47129d6c6ccf73c12c941ad521

          SHA512

          1a9a780a63ab7e23b21ce6b764923d119b991a24572e58d77975cc63b4ce6d9e3a93503c93ee04fc3d27c5fc37f72e1e5c949101860633be8f333be037cd2d9c