Analysis

  • max time kernel
    151s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    24-11-2022 11:48

General

  • Target

    a5ea8e8aedea218a3034209ea079fb68fe8758924b790c6520c2ad2c2a2d3fef.pdf

  • Size

    1.0MB

  • MD5

    748ccb923cae70b11c3957d7f0346e23

  • SHA1

    0deece544e94545ca05ef98b217669071d11bdd4

  • SHA256

    a5ea8e8aedea218a3034209ea079fb68fe8758924b790c6520c2ad2c2a2d3fef

  • SHA512

    cf2b9ead547fb8abe571d99d958f40f47d08ba6ab17b7cf75002bf49bd99c0dfac29e8bd36bc833ce1d5e4659252263b474b0e2c199e8c32fde8bdff8c6b3988

  • SSDEEP

    24576:cyZjTcoTCKhju84+3y20Up0xYBDcJgn78oMbLWr9AElv2v3ni:5dTcoTLRZWyDc2nQoMmRAwvcni

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a5ea8e8aedea218a3034209ea079fb68fe8758924b790c6520c2ad2c2a2d3fef.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1632-54-0x0000000076BA1000-0x0000000076BA3000-memory.dmp

    Filesize

    8KB