Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/02/2024, 15:50

General

  • Target

    87462543a66f2cfc264e901a35995d25.pdf

  • Size

    86KB

  • MD5

    87462543a66f2cfc264e901a35995d25

  • SHA1

    66f3d47d00805ed8dfc198cf9359c9d9377fb215

  • SHA256

    b42459059c581b930ba8d71685d8af6d5c8008bacca1c0dbba49949be1d4e87f

  • SHA512

    05f9a8997d50c7be93bade6d5fc00123554c215ee0d04a7da0a26ef154718fd5f0ecf036e4c70f1128dd6c57ee2bb644109ed948d17db140e3cb52a0341d548d

  • SSDEEP

    1536:ZUAs1lkn//lPoH5UJdi9EkMJQ57E/HZafSXndKWidn85QCcW6pOu2jGJ:etCwHOdi91P57EcfSXdA8fVu2g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\87462543a66f2cfc264e901a35995d25.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2264

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e0b98b211c80876e731d77f5496c3df3

          SHA1

          61189946213da4e448fbf85eb6ee206b1367e8c4

          SHA256

          01a9d98e02069171737d68394422545e87946f09110205913ca1c8efc6fa3305

          SHA512

          5e8c93d4f83013baf0ceb37829bbbe0c533f1c1a467a341eb75edfc17dfcbbfe9c154094e5996d8d10e6b47c78571569355a8abeaef58053db7386c993c392e8