Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 06:51

General

  • Target

    5acc1a03dc5d0d26e275e1a757b1775f.pdf

  • Size

    197KB

  • MD5

    5acc1a03dc5d0d26e275e1a757b1775f

  • SHA1

    d0e16e051e50c3fdb41fac40c69dd7728e7fadb7

  • SHA256

    5c5af6fb8f21b6479e41c5862b54ff8e13c38fcca99bd80e8adf59c58869b1ab

  • SHA512

    bac78cfcd1511ae7ef4f8cdfdc4ad977fecfab6531d5a14e7902f3c8ae5f92aaed5b4d5c46f07d52e3c93823a4f70a563d749e79900b03ac22787e7f2d004235

  • SSDEEP

    3072:LX3M1JDxOLCTNu5AvFjBmYa5iLf2SFDGjXeCJJCWsYUIKVXjYmg2usUwrpFSxk2T:Lnq9O2BuAvla5iLhueCJJCWaIKzVjFwT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5acc1a03dc5d0d26e275e1a757b1775f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    118875ca1f83a4ca06914a83771eb4d7

    SHA1

    1ade6764f5e37fa3a58ce9a84efe8f9210b57bca

    SHA256

    67e1c3a93659a6b0ad0a0dde46c2e4a4c889f7bc63024ceac580341bf52d71f7

    SHA512

    90d3a181489eb5f965936be3f1a57444b695f2662116c83d074619f232d4b42429833f8b5f922882fb33488d21f9a022f24b1af1cf4bdd8cccaa52dfdb1841fd