Analysis

  • max time kernel
    151s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2023, 06:05

General

  • Target

    PR10559_SR_EN.pdf

  • Size

    844KB

  • MD5

    bdf588e5f7d5e15a95bff47718245b3c

  • SHA1

    20e9205104ca6f7623d361c3ed5c50715bc3ea51

  • SHA256

    126f0dc2ff08b82a42b20cf3640d4419bd5597ad52e32a5a311fa9894227c8dc

  • SHA512

    ed934ed7bdbe1228451154e6c3169128cf5faf06e3e16183db13743cc83a21134f6f606165fc72461109d22b47bf405560744af8b2ff8299814a899aef698db2

  • SSDEEP

    12288:5kU9Z+of2wFEdmS25PqxcN1864JmwPfL7daUJfBmIvuYQVVHRNInV:5kU9zFEsS21qxW6+Wj7AMfBJmYO1GV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PR10559_SR_EN.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3911c0b901574e3bdc0c4f1e466089e6

    SHA1

    97f046cc3a33a27441532c1c6d3154cc9512e718

    SHA256

    ce6aaaeafab794f0f4ee96f218e67d703c1f14872407dd37de4cd6d725095635

    SHA512

    0414d06d375adb4ebe28c86c040ea78a8d8b35496cd255c03d56c1561424db63dbfd47783b66b6a7c59c5ffb52146867870b85c4417304ca32c1320c602a009c