Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 06:26

General

  • Target

    66ecfe0abd83e78cfb94379c0315d4b3.pdf

  • Size

    34KB

  • MD5

    66ecfe0abd83e78cfb94379c0315d4b3

  • SHA1

    bd432e49d922fe7a4e9fc26227949714bd5c6dae

  • SHA256

    561d2470d0dc7f1bf469aeb0d4cfd9d9d0b39f810f6d28f9156e1e3e11ab0b80

  • SHA512

    99f93321360d2ca239cdf7e27daf60d6cadc138b36deb0fe3bdbf2e07d39f6961635f23a4db3185a2fa371c6f1e6c04a7cc26f6bb9ed53211bdf6aafa1261568

  • SSDEEP

    768:vrN8AZz3JLS6ayX7B+ZbLK3SxH8l3viML/dnAt1mKYO57CUhyi:jN53gZXK+q3VL/dnADCUhyi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66ecfe0abd83e78cfb94379c0315d4b3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    06ef89ed46e07f0463f05bbca3de30c6

    SHA1

    c7ae97146394d9fb5c05961c37e915e33217ede3

    SHA256

    be4e3a4977f4adf0b2fe0f4062e20f317d9e64babeb3379c842882535203ca07

    SHA512

    4721fc59c443c9da449587c16644f08d0223a8c13c2e31aeff45f9dfe4bc710cf2c6fee4ee3a56af040ae246daae8d266899ad78ef6af875137a7f75dc680baf