Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-01-2024 06:22

General

  • Target

    66eb5f6a82ac2852d57903d8dc097900.pdf

  • Size

    89KB

  • MD5

    66eb5f6a82ac2852d57903d8dc097900

  • SHA1

    a3a63f124b25e13e8e98ad3fd28b40f8ad70b342

  • SHA256

    ac179c7684bfac2684351df5484b75197f923091743c88fe9ce03afd4e853d09

  • SHA512

    9f5273132f250f1a31905d91f42f6aa5f00395c3ffe4c696438409874722c8f3a4fbc6038d48c27f0d82df07dacf81af91a2b33700b43f16d1868dd33fc849f6

  • SSDEEP

    1536:tTJ9UCrhIT8OUtqTb+49PfK97JZx9a0+wvVIgzcRgWHpOvTWyow1CrHyoIx62b:q6q8z4dfK97JZx9aXwvJU4vLgSo6d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66eb5f6a82ac2852d57903d8dc097900.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1835616d5d619dcafb743db4ffd9b9b8

    SHA1

    b0453b3f8b79804f687a2f2c91eccfb0f4ea77db

    SHA256

    bb4f6b880f6afc149ffcda53db453e61f6193a4728ea34db73d77bbbccabe63a

    SHA512

    e37e194fdf5c39f0cbee27223e6f0aa96a047f34908cd68dc5e67e6a326657d78fea9d54475ffa5d1bacb89efb235b145e50d49e38cd995b0ccd294108bd3757