Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 01:20

General

  • Target

    6685d4ead6273b6cec795373c72e8faa.pdf

  • Size

    78KB

  • MD5

    6685d4ead6273b6cec795373c72e8faa

  • SHA1

    d5269891cc19f89f67ca56fc89d5332ae7b0c6df

  • SHA256

    573c20b92cd7619c265b137737c671629b2c693dcd531550832350cfa6bfb929

  • SHA512

    0b84e0ac8f309ae38cd9a74ca5a486f0c5c25ea31ede2a59cef39693dc2eef829d486927f273f4ebf65ec6414b87df5ec45bade3a44aa1c297a62b860576360d

  • SSDEEP

    1536:BQb0lNkqQ27U0yKgPvuYoaGnhm48FgrD56xnbaZW6pOu26W1WI1aIhddGy:Oc7U5KgPv6TaqH56Fa6u2CI1aIhdh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6685d4ead6273b6cec795373c72e8faa.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          238f111a1ed7b24746d35e05ddbf40a5

          SHA1

          5aa410cb923989fcef0028636c7bc944837d5357

          SHA256

          709b3a2cf9bdeffef8ba053c9cf6bd2c90e03af0119b44ec9b97f283ba01f9d4

          SHA512

          cc217efc334743c7a08c58e6450c79f86f2cf29a16dd9b4133c408c085716496da616d31f870c0ff6a50483d8a9c7edca21e99e0ca6ec25e766c86786799e586