Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 15:53

General

  • Target

    5554e6567eba3e90bece4ab4e0b3158e.pdf

  • Size

    34KB

  • MD5

    5554e6567eba3e90bece4ab4e0b3158e

  • SHA1

    204f1dc6e8ca988e3e30b31ec6496ace57385f46

  • SHA256

    a1a62da77e49eee128570b3ae62be7c7dbc0810b0e56064a0efdb5bba719a0a9

  • SHA512

    a8aa1ba787d31c98a738d0115654c8a9822f1baadef0c57cbab0e8f07168873dcbca606e8f65b4d07287afc925c12e49b4925f8ee49aafef99c976242dfe394d

  • SSDEEP

    384:FSTVyk5GcGJMZs9Qh5aeTjwYicFfCd1Lni6TiROnTCUScvzC4owPD4sAWvfU2ONg:aVp57JZs9QdwjcFEKOVC4BPEsAx9Tjyz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5554e6567eba3e90bece4ab4e0b3158e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e9e47038cba2bc3c977c7295b0282060

          SHA1

          9f946623baedfb5717fab520a3a5a20af38beb69

          SHA256

          e375bb8a673e1512d128a3df8303849d651731d34d04fdbeb0e69c6db22f6771

          SHA512

          ffefe4e02272b1ed037c00875163bc8aaae82cf604cd8c408059eb0e7821e4113336a22cab6d9ff1a55221e7626a215c2eafe1cd1c6f6fed64c7c776130ec17c