Analysis

  • max time kernel
    150s
  • max time network
    31s
  • platform
    windows7_x64
  • resource
    win7-20230703-en
  • resource tags

    arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2023, 21:35

General

  • Target

    45c344a59cc3dc46a699a65321c7402449345c52d9279780f71de111c89bd9fb.pdf

  • Size

    1.2MB

  • MD5

    e68fc4d584d284585a01fff009b4a886

  • SHA1

    820e1b45743bab21faa93a137a9ae93d9196e7a2

  • SHA256

    45c344a59cc3dc46a699a65321c7402449345c52d9279780f71de111c89bd9fb

  • SHA512

    d5fc15615a0638cc008dd61c955461dcafa6d1852b0b14a2884f020d30d76ad7027ff12d2a8cc2528c64c29e9e5066f6bd5b1d87e0d74f91915f813288767595

  • SSDEEP

    24576:bKNCwoay7FbDV0Ltq+KFq0nMy7cM9wHRtG+Bmtn96BwBO4:i8BbDV8tqvFXMXM6x4+92O4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\45c344a59cc3dc46a699a65321c7402449345c52d9279780f71de111c89bd9fb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2404

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ce1dfe766b6aa6c164ecdcf3b4f2c94e

          SHA1

          87da8d0cb46a9e8463ecfa53f0ccf2cead200d73

          SHA256

          d86a460df2a2afefd20ed808adb174f87c172d9afac42debc6004c58bb153a1e

          SHA512

          c839773c7bc691827cb5557ecde22f8f6e279db9bfcc10dabd8d38829f61dd9a4c94f9614b0a98c3f1ef454b80135de35e51d72e53272ead0ad9cf45393b0c74