Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 15:55

General

  • Target

    5592bd65b6afd8121fd0891244ffdbe0.pdf

  • Size

    89KB

  • MD5

    5592bd65b6afd8121fd0891244ffdbe0

  • SHA1

    34e58a059cf569bbc5d0e286ac73d7d35e3da093

  • SHA256

    516ca3913c60393b9cd53df8d21a0d106f9afc1bb3fe4bef4f0ec640451fc81c

  • SHA512

    11272640f1ad1e92cfe1b73baada0cf3481e933593697d7740d2764be0260c56527fed10f58dfc396202cf85a2aa0cc0c72060b523aae42829a79049e7a406f8

  • SSDEEP

    1536:ywfFDWYr5isWL/ijD+XCk8n2cbxphKL2pQWjBblxaGfhxTt+u1WxApOGpoLbYveq:RWYMZ/sICkOvxphKwMKhKH3GpoLbSDCG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5592bd65b6afd8121fd0891244ffdbe0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2256

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c9d50fe65613bd33a47f5be8c3dea204

    SHA1

    21a0ce908dd1e7b6240b5ddf73fd09aa4b7f1bca

    SHA256

    686215e1a4f3944d0a2cb1388951c9db176cbda0a3720062ac1b01b394c6d7c1

    SHA512

    1f7f104ff1f805e578196ed80d46924c46194e5a4c55eda6dcca9b66c3139314cee5bb124ad512d207478d99bf698b479a927de9974c5e75c054a4d9ba778e39