Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 18:26

General

  • Target

    65b8aef78845767a5d8f987939166829.pdf

  • Size

    87KB

  • MD5

    65b8aef78845767a5d8f987939166829

  • SHA1

    706e438ed2a76aeb8cc763dc7cc44810093e0e2a

  • SHA256

    d9cd3fb49f64813b40af3188917c448c0080d48641fa4581e959c873a8c89e7b

  • SHA512

    f66035ca8900fb43b49a81fdb6134981301f1bfda9ffa9744243e39c2b250c131e9ed895992a1bd0e56d07816ecd03d81f2461c01d57c13f5d92200d7e20e35f

  • SSDEEP

    1536:eV7gwaPoABMGeyNF60sLr7EhKol1U5KRIyWkNpOPaWeSDQCCNKF/2T3pLqbHT6Kr:EgwaPoOeywTL/Ehz1wPFYeuT3pLqzWKr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65b8aef78845767a5d8f987939166829.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2288

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5082d981de9c575c48cb94e9751f0d32

          SHA1

          0b908e20f02191d89b2c6a3b2f6d0a63cb466436

          SHA256

          fb7171ab3b2efa9f232317b86ba3537ed965c2fdb78bb15166ef3a0270632f9e

          SHA512

          b228bff6e0e42a86412d7213f530715bdf9367f08f17edb97981d5f72e3d2c84c9c789f4042f2c267a11d0230a0954a2851a507922a1379ed4fabea8660b042e