Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-01-2024 15:04

General

  • Target

    6fbc41bdf2980431b11cc3e4cc272370.pdf

  • Size

    80KB

  • MD5

    6fbc41bdf2980431b11cc3e4cc272370

  • SHA1

    b5aaa70363465eec91ae709271ce3733d24277b2

  • SHA256

    a62a4de15bf246317826dddc189f5372064a3554dc58afa077783c7f4a40377d

  • SHA512

    88e576ec68f2d537ed1f188e63728dbbaad14300ab11cf9a178fffb60dc7667dcf04b32a41301de1df9216b6fb718c6820fbe862a6448ca6e8a924add5b70688

  • SSDEEP

    1536:Zqrz6O0p3UHfP57bvBEm/1DgyPZAplDFNjpWhJ65CwurHTYUx9/M6zdl:cX6OS3U3tjBb1LAXDFNjpCJAQrEUx9/1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6fbc41bdf2980431b11cc3e4cc272370.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7eec9fe4f25d2dfc23b7c54e37060b8c

    SHA1

    82138c4606e521b3bc703dfe42820e5f59535834

    SHA256

    b21952f625b72825e1bcece4ac8bd89292e7394f5efe57bcf98118809186698d

    SHA512

    170bd2da3915eb04a847483b005c818973d78500d77a5cc7b70fe7a33f5c4402472d93b4ea8fcff0da748247f91bd35359350abf50ece5bbc3df0457921b5987