Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10-01-2024 22:09

General

  • Target

    51bfaf63c521911d5076a834a7058908.pdf

  • Size

    85KB

  • MD5

    51bfaf63c521911d5076a834a7058908

  • SHA1

    9a073d6aaee3a83a5e4a56c5a7a7debc40bb64e5

  • SHA256

    d9b27db18daba5a13c3ec1192367fe048ddd761b63548c16cf6897392ed435e4

  • SHA512

    eb68a517f80e09660b20e4b301fa86f2f3da8d81c25f2a17a518688898e899777e73a031567b8cf92d7744c4d5bfd595e33c01099daf194fa07fd2a1b5415c3f

  • SSDEEP

    1536:rv/I+S8o6oGKVRffiKhOiuA0NPYQFT/LwyrHJu4vcKsihWoTrefst7nJqZRgsZWM:C8o6VGHioOiunBYQNLwyT5UWHnVnJq7d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\51bfaf63c521911d5076a834a7058908.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    32e25b3a16fdefebc083fbd324c028ee

    SHA1

    128b2414c0b219a6467468c506446bfb858c56c3

    SHA256

    7841c694ade8860027e8b36b869ba679d615990b0f63480a4d950d72a740a961

    SHA512

    29be26ff5ab5e79f128941f10b7e0b3ec65296ae9e4798ad9fe85aeee1fb34195eb9421aa8c0dbe946ceea5eff908f2932450975cc1fdae8cad363eae815cc60