Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-01-2024 21:04

General

  • Target

    68a2a3fe560766016826f6a38caa7f76.pdf

  • Size

    87KB

  • MD5

    68a2a3fe560766016826f6a38caa7f76

  • SHA1

    ca723bd1d2666f76c582dcf41cdb06848b064625

  • SHA256

    bd99e10716b2156bad4bf363b866b0d9a3b683a23c23a5f699b6f5358a919930

  • SHA512

    02152b92b5fd84977f20032d120426f7dabd6f4e7f46e209498ddb889ebe193ec60444655038b623a209f37b0fa8b96bb6ed0f10350c05c431d2f9524348b64f

  • SSDEEP

    1536:KlXKK13JOI3bMAG3uxry/JLRWFFolRrHPM8+0svLh7aIWz8lR1NHE7SNWwpOSemo:6Z3pLg3mry/1RMyrHPzcvLh7ajI1NHEV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68a2a3fe560766016826f6a38caa7f76.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    037486836f2fcce5be50a8caf4d33fb8

    SHA1

    520b48186fd2fa47e1fda56220aa780f72018fdf

    SHA256

    b8108eda5bb1b4ea046745bbebfb3a85d499014d92ba8410d2659549d2172fe6

    SHA512

    8955df1feae1ac58ee2c24e1cd5f894762a320040046dbac93b3bfbaf1df29988b92fc13cdc99f5d396b100e66c678e70409d6f2a0483d4e7e2ec80fb2bdf467