Analysis

  • max time kernel
    119s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 03:32

General

  • Target

    5bafd6f440e5b2caef6c9321a307385e.pdf

  • Size

    40KB

  • MD5

    5bafd6f440e5b2caef6c9321a307385e

  • SHA1

    0c2e1cec2dd7415cf3929eb9ed4ecb3948349ed7

  • SHA256

    ecf210afd96482e149e6014f13b2e13eeea10f3c7a6091405cffe4dbce39f7e5

  • SHA512

    3360c2d308b650f82f530e8b01deb4a6717440ef3934374d32ad0d7fa358c7a066edefc3896cdcc8d5de9e58b060d9835d38ad45465574038c9b5c882c0de060

  • SSDEEP

    768:gkRTevLP2KYqsGkZGyZSLqMlXLEaa/6k2o4qmnCu2ZnCBYO/Q3VnI5wX:gksYqfk1jYXw6k2hnSZnCBN/cVqwX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5bafd6f440e5b2caef6c9321a307385e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1312

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          809e964c22aa47d159428e86abba280b

          SHA1

          905d20e10332e218a4cdc6c00181239100750610

          SHA256

          c64f52b500967c602ff45eef75db0edd50e3c06e51ff21189002c4855bc78a18

          SHA512

          91bcb49e3fb4e7c8ff5ff818c76fd431d4d586ecb3aec275af33da6ac1d990da8be6061dfd4528d246c06691c44dcaccdb5ce6158dc90ca3e7220cdd363caaf0