Analysis

  • max time kernel
    192s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 21:33

General

  • Target

    51ad02a8465c4b414b099dffceeeb64d.pdf

  • Size

    91KB

  • MD5

    51ad02a8465c4b414b099dffceeeb64d

  • SHA1

    9c2475fe1d809a83eba2565dbb0bf644a3e4143d

  • SHA256

    ed70a9836546f3bc544334f9ed7a3d8d034ab164d7ebdb77a67cab5a06e08beb

  • SHA512

    64a631dd333c3edfb4cc6ace04835e758cf10e4d57bee3e58043996188977108339e0d81dbda8a827b19e3d4819e645f487f05fd1f4091c30b73826e29561efb

  • SSDEEP

    1536:8D1kKdYTV4awRYPzUCxpxgvFQELP1Q0WS7suCGUgc3oWHpOvTWWQbBx2IBkAEzj0:IYTJUiUCxXEFQELP1QUouRUgsQvF62I3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\51ad02a8465c4b414b099dffceeeb64d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d669ba6ac25b9eb1324b4295014a8128

    SHA1

    082bf1b3e375daa52608ed4253d8d193b879ca9c

    SHA256

    f3b049f0cb9d1b523f90947411094b909ad4fab571bcf6f78575b8384a637772

    SHA512

    fdaf9ac91140f63c380000857c56836fb1f7895a5aa9d16045400cecc32d1c327fbbe54a1634b7345b21d372b4a2e24bafcb4ea34842455691c0525b2fce07d7