Analysis

  • max time kernel
    121s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 04:57

General

  • Target

    5600ba00b3e0b0afd382b23e75ef4765.pdf

  • Size

    93KB

  • MD5

    5600ba00b3e0b0afd382b23e75ef4765

  • SHA1

    7470a5c1d6d746434bd5fceb9a0cb2323a5a276e

  • SHA256

    211809fc363b37fa59f35ea43dc2fd323a95f8aadbbbcd201c6fb0726f3df367

  • SHA512

    bb325c89bf82a341537ed500ed0c987339c016751d69cd38ec95bb288a9b918ea65e811169642c0e203bef0568bba81a256de1a5f9cf1a2dd4774fac11a10562

  • SSDEEP

    1536:+d6dIlhJ4zkE5I0PJuhPCWQxwB/8PfINex9IHJJycR6WypOlWWxdvn8QgkxBjf/K:66sb4wE++QZUw58PfIg0HHycplDd0Qji

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5600ba00b3e0b0afd382b23e75ef4765.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1968

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3e2ed593386964ebe758be46b87832fc

          SHA1

          27ab044d62d736ebb8bad9ad5454c0f50c60d231

          SHA256

          d2d7eb4e0060c6e9b42012d6f53a7772bfb034355d9748938147b81bad401344

          SHA512

          57dfa0c524554f935c71addb01c3bd164e2e0128279e0fcf26b458bfce25b4e4a2ac843829312a89edfe1c9c02fd20af0d6d1ff724ef74aaa79adc964d36ab38