Analysis

  • max time kernel
    119s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-01-2024 04:06

General

  • Target

    66a7a319f3b8b383993bb18fbfd2364d.pdf

  • Size

    85KB

  • MD5

    66a7a319f3b8b383993bb18fbfd2364d

  • SHA1

    e28e452fbe0efc5212ce8c44e57adba7adfcd9d4

  • SHA256

    94925951bcfa19292b846a88b9c241889585fba30a86b37f158d6889c2ddb860

  • SHA512

    4d58693183edf8241921fa23edd3e1809d207af4eaa4f89209979557d69da3e72efc95236dede87bfc29cf6d2db64ba4892cf5dd438c78fd7afaa14e81aca3be

  • SSDEEP

    1536:K33X0AW5RHoNgQQLeyGSGaPBkGerqXWdWecUNXWxApOGbOGV2a:in0AoGQJ7GoeGNecUNY3GCu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66a7a319f3b8b383993bb18fbfd2364d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    efb996b41d02cc949e97127bf8e426df

    SHA1

    8c47b3a98f1b31452f9f782b486954b0c9c4a377

    SHA256

    aa8c9eb8d3dae479a8e58cfeea3c4190cea7a0a6ea0776b29e854e04a722788b

    SHA512

    8202b1f6a89f3b91aa3dae4b7c428d028dde2ea7a4848db14e1c0a13b57da57267a0f511ae3639f29aeeabc1fc1380183ff213cf8fcb32a98e03bf4d9b4c9a94