Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 18:42

General

  • Target

    65c1b33b9277f95eeeba7af60cf58cc3.pdf

  • Size

    80KB

  • MD5

    65c1b33b9277f95eeeba7af60cf58cc3

  • SHA1

    9dae4bfc232c7bb86ac9f737407a46d98abd1821

  • SHA256

    ecb0d0815b8f6cef054fb206683d12998d2bcc67c073ea51b6e9a376b9d741b7

  • SHA512

    9425f82a958df5ed61cf03129200a79fead56fc3bc9bbd7cbc027c9c6ae120b85e5f726663b0d9216ef688264a376f7cb87e363742c3e0ceab1cab02d75ca5c2

  • SSDEEP

    1536:9cSu1GKzxigwjHHgpDcnxzhm775kdIOwWM9uTUWmkQwU/0nnwWspO2iwT:ySLjgYg+1hm7qdIPUTqkQwU/0nnb2T

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65c1b33b9277f95eeeba7af60cf58cc3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1616

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a115b60be72990ee4ac50038eb3a63bd

          SHA1

          fd298074c6f2fa98a867ee13808b3765ebc0d532

          SHA256

          981193c310b42e79b45d14962c01c6b77cedd3e7cac79c9a2feeee520f170f9f

          SHA512

          5969b18427d71ed5aaf0cac4d125a6ffc307fe6535fafd9638961afdd94b41bae49726627f4c0cf41a17dfa16f221e27a43e5a051c3f61b97d2c8f6115555543