Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 06:40

General

  • Target

    5a3fef0d6a3130b04deecddea09958b5.pdf

  • Size

    87KB

  • MD5

    5a3fef0d6a3130b04deecddea09958b5

  • SHA1

    ad1b30e7b04688627b5fe908cda70bd8e1709b56

  • SHA256

    5d71a4699c3cc0470e7a50714adbada885fafc9b52fb3602fee2c5e0660b1999

  • SHA512

    f2f8e3e0387b75de90c0b160d4c7bb38271a163b3d85e4198a7a95966cd4e7d210001b36c17e27cfb09a06a39f84f6f0aa7db1f391f84af7f537301f9fa41adf

  • SSDEEP

    1536:oOLR6A88fWxhMfgSL+LDJgzUj04SOG/nTSuZmm7SJWypOlWWxcWlEfK:u8+MfgSL+GzUjlSOqO/m7SylDb7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a3fef0d6a3130b04deecddea09958b5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2236

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          28adbd74ac92c193e4de0860812e43d4

          SHA1

          04b778aec0a2e8e55a0b4ca84360a3ee9ac9940a

          SHA256

          5a2410786880cc8a7aceef5aeb63dbc0732f18594b4e39fe1e1618b876047b5a

          SHA512

          3e94c840f33ce84974528565a3646a767620079027d8df9db51b041ecf346fb5958a173b292b5fa3c43e164a8bb7f79a2b235a6ef33d86d925e3c0ff018487ec