Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 03:58

General

  • Target

    524e83f8d2536637698a5a3888bc721f.pdf

  • Size

    76KB

  • MD5

    524e83f8d2536637698a5a3888bc721f

  • SHA1

    fd4a3543b4bb4ef056748ac0cd4e0d55cfeac665

  • SHA256

    6e6d2bc33bbaa11b393194d82b903c798810a140870edb93be54581ef878889d

  • SHA512

    8a68976be610378aa4a6410b8920e53fae7f6e4bd7e24fb1505e4baad9f2e865cac2816d17ecb3dcc8024852366c17087f405c278210703111df7fea1e59a7f1

  • SSDEEP

    1536:quNb+BgMAzXXZVbdrGnEuBvOYNS/4I53ijcpWypOlLfb9W8zYmNS+On:1t+BglXZFdriBv9Qz3mcSlLDKaE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\524e83f8d2536637698a5a3888bc721f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    531131abec94f1850a53d122ae9a726b

    SHA1

    3cf228e8cdf02960bd1f8b9290939e7083cbe71a

    SHA256

    30506bfb92fdcfe5df74cec959c0c1a4c6acbe21ebf57de808c88ea10443e28d

    SHA512

    a1c2f09716397a1173816a0ec986f78859bb2de6783d8b35112d95740c35f8157f2b16fced8576cd9f0462934f4a4c144e4006ea69c3b3628db17d02f1d9709b