Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 21:08

General

  • Target

    660a83122330168a1200e06cbed04859.pdf

  • Size

    79KB

  • MD5

    660a83122330168a1200e06cbed04859

  • SHA1

    9d25d3aac3217727d536364cc6173323e1b5fd2f

  • SHA256

    1c63634b7d3070e31ea9363bb9d18a72aba3a4c37046626b7b2bf30c838d1c42

  • SHA512

    263ce872a9f8a2476757b854ac46d33af9f5d2a46d2190d11bb38774e25649439082d373b7ff64c88426581474a906565e73948afa50b2f1eb2ee42df6d8ca45

  • SSDEEP

    1536:h1DuQPwpcFg58mHbgqmhlOpcPV0tNTMv+8gIRlDYhnUltkjWspOTRWl9xK1pRH2+:ruQPpFgwb8wVQMvZ9RJhltkaTcxKXVhr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\660a83122330168a1200e06cbed04859.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3036

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8d1fe8ac1ef497a36463cba1733729ec

          SHA1

          06e7a9db46fe87291aa86154b8ff8e63443337c1

          SHA256

          23db1bbd518952145b1ab604d781c3088bdd46cd2e66908fab31e48d9117b896

          SHA512

          7a4588e9328533224f668b222c0bbff4e661271bf0ba48148395e0aec69ed9f4fcab46d30fef134482d82cd66fd12b85ecf052e1805cdb028bc594f6fd70914f