Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 03:06 UTC

General

  • Target

    58a4391093cdf235dd271a48f9b71970.pdf

  • Size

    70KB

  • MD5

    58a4391093cdf235dd271a48f9b71970

  • SHA1

    96f1e818ce8249f30f542226ca8b69d68eee8b67

  • SHA256

    e01239ea2689eb90a4859c3c7cb18a48d58dc3e1dc6e07ad3e101dcce164106f

  • SHA512

    5cc5a48ccb538ba92b2ddc97b49778f22439784a7bcb500ec2c204a6ec1cab64e1767299243606242f43ead4720a72ef43882e20a79d75603ba17fc2327e1a78

  • SSDEEP

    1536:3KVflJoGDt2n5DxNFI14B4uYDrSnwLtlOfDPqt3ugMuSnKHeeayAlafwglei:ujaDPqWGinwL3QPtgJtLdw/i

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\58a4391093cdf235dd271a48f9b71970.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    08454ea2da11cdd23c05af7ee45323c9

    SHA1

    5316af9cb34c0e53a379d1430cc90c0d7ebd8169

    SHA256

    5bff923467d2fbcec38788dca44daad6ef95df07e6fd75c53edd3798e71a5c4e

    SHA512

    aab93964409f9696d0fc2ddc438589e60e7f7d405c59801dd4a2c584a3cbc83e768034b2897ed0d220357434ef137ca4e238a95fcaa2bc116ac172474f8f5f4d

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.