Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-01-2024 13:29

General

  • Target

    67bbc3e2bb6bb03fd31b7e7c46455af5.pdf

  • Size

    45KB

  • MD5

    67bbc3e2bb6bb03fd31b7e7c46455af5

  • SHA1

    c8cd8c7be1304cb95040b7046797cca2b5d3cc24

  • SHA256

    bce93441288607cd637cef48d608084a6a760e831b6892fdc78edab18a48b955

  • SHA512

    353ee40f7f1c2afb48d3f4772babeca96b0b37cb2502e488d6f88799041528a0a2ce8495b9026c0d9d6dbed0b9a94d2b986adf919970c524d1bbffa388d70d1a

  • SSDEEP

    768:BI4xUGL+xNeKPqrxLXGONubEesieBuT3ehU5Rfayoz+Bhdd78g6QlOdtBrj3nm9X:u46GSx7qlLXGONubEesieBuT3ehU5RfX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67bbc3e2bb6bb03fd31b7e7c46455af5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5cf2a6aecca998e00f3e96dc455a8dc7

    SHA1

    023af4cd98ab850169aabe3e907de6070a7097f2

    SHA256

    b61e672741492c0fb3124beef0928fa50cf24289da47c8cd798758d096627343

    SHA512

    1008a148b31f663da8c4a7c4d77e1af8132040fc51732ac142d7facbeb74974cd350868afc7aa5933a491493704db9405c444c2717da26952d91e43661f0cdbc