Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18-01-2024 20:27

General

  • Target

    65f5c580391e169aef59c50bc6eae1c1.pdf

  • Size

    85KB

  • MD5

    65f5c580391e169aef59c50bc6eae1c1

  • SHA1

    d70fd314a4f872ded8f22d56fe3495ac81d493b7

  • SHA256

    f93c3ec775c0ab14cdaaf7e5dfa6c92b91ed94df351455f4f1e01e05557d41cf

  • SHA512

    bf314be7f4affcd1ceebe5fb33e024a3b130279a60474afdd9492a2914419ebcd540bf767c3f8447bd9c506374aa8eef0048219c24b72e71f0f256cf4a0352a0

  • SSDEEP

    1536:HYLEvI/eJZ2Y9jGnxCWa5O01bQSsPgN32tvgcGSJSV/ZiIqYexq7gIWiUpTHN0Ou:WEvIWZxLj5OgpsPgN3uIhSJVIqHttF94

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65f5c580391e169aef59c50bc6eae1c1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d8a03c78195157857ffea43f44db2a38

    SHA1

    7ecc650ae8f8b6d7da01e43815ea5222c1e83b10

    SHA256

    387ca20a290f9aa5a17babbbbc9e0af517c7ccf53f709076e186a006112910cc

    SHA512

    1299865ee12b1063cee603eec7d17349c12ed65fe4f6f4ce271186a229742ed6c1d65a0d53b650b181421a6164112cf71f0711cf69e1739838d787cb1451bfbe