Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 15:40

General

  • Target

    51fae01eef5f5e25db44d5bf8fa7d1d7.pdf

  • Size

    91KB

  • MD5

    51fae01eef5f5e25db44d5bf8fa7d1d7

  • SHA1

    5a8537b68915fb41ed1989eae0c32b04141db47c

  • SHA256

    aa40a22212818bfea3237e07ef233cbdb90627f6cf55fb720850161101a65f88

  • SHA512

    69a136771af98be3cc782e0a168183220de05a3c56cc46d27739adf5479b03933fe19e5c3fbc43be77427283c719eaa463f3a2143fd269004deb89cc5d00acc0

  • SSDEEP

    1536:iTKSqJu/7p1TrDXXejJm3Q9dwLvbNeVATNXTOXwW6pOu2YkmnqW5CgYmoBYEj:SsMjvTrDXukQ9eHNeeZXT4Zu2YkgqZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\51fae01eef5f5e25db44d5bf8fa7d1d7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    76c94aa5a273219b98fecda8a6966fdb

    SHA1

    41a1af4cf1848efdc49878a0db0e6f5eee4f8678

    SHA256

    7d825c318220c56e6e4ca3e5382c10292fb721e000fa362318fb86f8464af7b9

    SHA512

    c4e2d113644719c47726f50318ad38f7daf14eee572e215a144dd8b653bad36d63ab7ba673aeff51c7784bc250ef3853b6b6d49b91252ead6e17fee051649228