Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:10

General

  • Target

    001c5d9807271e9aab2fc2f26be58b64.pdf

  • Size

    86KB

  • MD5

    001c5d9807271e9aab2fc2f26be58b64

  • SHA1

    a385912cd700e67af6ed737f8bf63360149f0ab3

  • SHA256

    c0421787acf76ad712a288828ad60bb932055864fdf24ffce1c227939ab92523

  • SHA512

    c94f84c0a416573bdc6219509339629044d247ac13c853f098ef0adf518b35e9167f8b4b95c7d14982e1c558e6f1d9e44b42200fd9f36597289a5c0665bb0953

  • SSDEEP

    1536:ihgeAHF42MyIOC+EmryOyXRjZRD8RVfCaE2JjE9tPWH4gHwWQpOCLbMr:/eoMCEmry3XRdkCaEEjEL/gHfCU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\001c5d9807271e9aab2fc2f26be58b64.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1e2a094f22586779fcf6eaf44aeef892

          SHA1

          b6e467ac56d9466abf672dcbefdefd5d26a5df23

          SHA256

          3606b68e8a60bf0c35136edb47cc24532fdd6669e74301d7833619737cad3d4b

          SHA512

          e5342e491a008a2afeac0ba0f7b9d4568d8941c066a46cd2c7a26f93df5e6616013e131d2532c432ad9cdf561a3c6824d87d01f632018efc48551934a338604f