Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 07:33

General

  • Target

    5cc06a0e40e6d1f2ccc5d905f9502644.pdf

  • Size

    84KB

  • MD5

    5cc06a0e40e6d1f2ccc5d905f9502644

  • SHA1

    a29632568eabe88a1ecafd85d6287b1d236f4ff6

  • SHA256

    eedb2178caf5c833d5ecef3ba57b3a63f12a4e47ffff9993b7814e7c972ceca3

  • SHA512

    7770db64d4dbd5af82f4e65e312d770afd06a93285eadf62c9d82ce3ca825c92987472a44d02ff2b7609fefe1a0c1024e98540574922e7aae787f47758ae13b9

  • SSDEEP

    1536:4X5HFyRjEOlRFxnMSypMlePAKxE7UjjDxWJovUUPudWHpOv0d4mqot3t:SgpJmSY4WE7C3MUPuLvM43o3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5cc06a0e40e6d1f2ccc5d905f9502644.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9b5aa6b293be788b206495edbee25dac

          SHA1

          91ca8869a22d732eb1bbeeeac65e4f0a64c16145

          SHA256

          1d65f9b46a9f663a95a238a7fb4ff4649021b74883bfa8c1fb9e0ec102750a82

          SHA512

          72c3841774985ee029a71f141516812291272b629cb944a7e10431a51fb827d8027231b833d210fdf025c902bd65d42d28f63d39ef3032d7bda0852606681c13