Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    18-01-2024 20:43

General

  • Target

    65fdb033c02c56f42d8ecba0ae93f3f7.pdf

  • Size

    90KB

  • MD5

    65fdb033c02c56f42d8ecba0ae93f3f7

  • SHA1

    89a9a30eed6a68c7c2bbaeaf6dfbc86e6ca2f00d

  • SHA256

    841a75dab9dddfc31f05373f889326a544f8676ff0e3755a194f493d0741a83a

  • SHA512

    db2988bfbb08bc9daa65a827902362ef58a31fb8deb36c6c187695a4093d3fb8eb55d1e1eddd701aee93fb1372d4f72f32b13d062f9e54ff066df20a2238535d

  • SSDEEP

    1536:6qhLheK6N9GUMTCXb/SoEWunGWSW9HSk+YqHoAMouMAVhzT+qFWol2gqnnqGkeyi:VbebjGDi/SovOGKqHoAM8qBhvBSqGkeP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65fdb033c02c56f42d8ecba0ae93f3f7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    30805845f902f8c11302f08758a55c00

    SHA1

    d019f5c1f6371e3c471cfe67f62a699241c9581c

    SHA256

    fcf82877166b5f3726f7b24cb89cf64d3c0807cb5ee6413bc7c16b12ebc87734

    SHA512

    b694d51e72f1dd82aa13b7b13a7380f8e19f5d856b6c755bb2bd385dde3cf2cff192bd0bc80c68ba8f559106c8f76798244dc206d9ab558db2cb1c84ac9486d2