Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/02/2024, 21:15

General

  • Target

    68f54d2603414eae8a6f8c29647150c915e6dade6fec0f898e6b6d0747a3e778.pdf

  • Size

    83KB

  • MD5

    57051402176ec890031b976948fca010

  • SHA1

    cd163ddef90f789105ab4f2771f7e609d530cd09

  • SHA256

    68f54d2603414eae8a6f8c29647150c915e6dade6fec0f898e6b6d0747a3e778

  • SHA512

    8a4bf1f339811c12d67538febd627646ecfd3470dba9932fe81a40900b3e85c6d33a9ced6572ded72cb5d3aabbd8bf7dc28a9c63418424e330e46f67ae7c1b16

  • SSDEEP

    1536:DUmYP7pi2Px9JLEnIwIASdqGDQqzTxgpIfKw48zYogyQEDDqiz1JvcFso:DwByKASdqGs2TxcKKhYgODlz1ZQso

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68f54d2603414eae8a6f8c29647150c915e6dade6fec0f898e6b6d0747a3e778.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9c97c2189db434ec9340a960cb2f50b5

    SHA1

    42b83f126743f98f9c744444574ff5e924ed8464

    SHA256

    f38cc982525910733d1d9b7ebecc0bd0964ac4aabd61c41cdd6a1e0f900f2afc

    SHA512

    5b6fc18bf32d4e5b77b80f0bcd2815c19d127cbae286318f0120ea3f95908794bbe8a5be4f8449ebcec3b3a1a1e30a1d5d2ac8578df370f0b36232d36cb215ce