Analysis

  • max time kernel
    118s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 04:28

General

  • Target

    54207931e8fe8e316651d92909890fc0.pdf

  • Size

    82KB

  • MD5

    54207931e8fe8e316651d92909890fc0

  • SHA1

    9dff4aab1b88d9532d3a9e2fbe8c250ac993d92a

  • SHA256

    25f9ac2dbc2976d1db21c732ba0dec030845e284f15e93058f4dd4342d1a126c

  • SHA512

    f0a85ee957500bacac4f01c25e32e19b8361a3d308fd3ca38c1ff7d06c00cdfc6bad4f55df20b1bd19919ea4c0a5090c61ecac9a30ccfdd167cd2fc33d78e815

  • SSDEEP

    1536:1tIMuDl9T+HND7dMZykgqv90wJ6WYpO2okjZKbAxWzbqMW5FPYgR:DGT+Hsghqvmux2oOqAy8jt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\54207931e8fe8e316651d92909890fc0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8915a632cdc2e579fc1df68fccb60d54

    SHA1

    f514d121991639d758c187a0e3a59ed3b5089ad5

    SHA256

    0c192e4da04336baaed346dca2272ac1b238d5e4f291a03b9294bb5894027a55

    SHA512

    96b907a1514d3350ce23116ec9576fbc114bcd6b55df4603ebc371f8fe1828ddec2d31a0492227a40206f5f8e7420809e76efd77e2b4f334cc7359d912b211a9