Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-01-2024 05:43

General

  • Target

    66d816daaf4738d8f6f3423771fd1be1.pdf

  • Size

    97KB

  • MD5

    66d816daaf4738d8f6f3423771fd1be1

  • SHA1

    8f8ab6cce3e16f1107cc57a5db32db17698d3115

  • SHA256

    af5c787864438b6a7ab5d64e469b6c487378d3be9f7acadbc4b4a1954fdecf77

  • SHA512

    c6a9313731e6453cab6491c88cc698780de8c7168a68fcaf690121f87c146d32e01f33aac75c9e140fbc6a4afc465f8b3935be431ffc3c291b59b553584c2145

  • SSDEEP

    1536:N1JaBULrJrNSB06dtTtqfghT3QwSVdgigBW4CJcH4+oo3BMWHmly6w7mPWUpO7vv:k45YBTTwfgCwSVdgij4zyg6w7mi7n

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66d816daaf4738d8f6f3423771fd1be1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8b54fd13577befeaf09e0a114cf5f977

    SHA1

    97e6dd131e2e9452895d6b292dd7a0427cfd4da8

    SHA256

    f41236bb212349c3e273b6b0e30da5315bdcc43f473e1cd1d486b6d4e2f35e06

    SHA512

    9c423558e9c9fb049d4ecc0d4f6174652af0e697a7d79fe917b5dfe7187b25e733be38befcae61cf4dde4e954a08759fd68db8bcbf8d3c2ee89584928305e140