Analysis

  • max time kernel
    120s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 04:03

General

  • Target

    453b62fca4acdd82a21539fcb2affe2e.pdf

  • Size

    64KB

  • MD5

    453b62fca4acdd82a21539fcb2affe2e

  • SHA1

    9c9b5040a7284f8831d3c1702792d2bc8f0a171b

  • SHA256

    6552b7945516f5c10b1e1820ff50a52499e3353f5a58c2fcc54f6f610092e66c

  • SHA512

    c3a7432e85e65b15523c936e8511fc9f1b3cda5fc9a0ff8d794de81bf5ea0969ed991d2f45a56dff2ec3e331e01bf8d8ebe3bee32529e72af319d6b263533c6f

  • SSDEEP

    768:USfPQgZdE4aJCRL3K38PsQsSNMLuYqhJ+wxpnMekkE5m+2Hjzy69FDHV7viKqkuj:U2FjEVsk3MN1ltxp3Ek+xVKslRuzpRy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\453b62fca4acdd82a21539fcb2affe2e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          90b721bfb0ea96333e67ef547d6d195a

          SHA1

          495b87b2e52f0065963270c1ea9752728ea90fe0

          SHA256

          6f210a6aa8b8d3adab205b1a072117655d962fb55a4ad39c41692a6d314a867f

          SHA512

          6935112c342cb7e578e0a87c1248665e3293d15fdc93efa32d39458f8bdd0bbe9473b6e9f24e589a84e3e62c2e0dd44d2c4cfa12c815c65840fe626794480473