Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 22:29

General

  • Target

    51c98ead7e94e7f8909e96b6706a5adf.pdf

  • Size

    87KB

  • MD5

    51c98ead7e94e7f8909e96b6706a5adf

  • SHA1

    a7e1db23d35c31df0fec39a5764a5acb8fa6c4d9

  • SHA256

    c9ce18e59cf45668d548eb85c253881e746d4eeb7720bad53c91d0a172caeb33

  • SHA512

    2bc074579b2d34b7c9a580d0e609b0c3dbb7b1c3e15725b7ab2de5533ea66a274cf2f8e45a69930a5d7347c5fa0c9350dfed0fcfb54a345c7f437de14b86434a

  • SSDEEP

    1536:UdqZakwpAkT8GW6kAOX1Qp0hYnDiwrTnwEWhBbzOYJnniVBQWHpOvkbvdIo+wp:KAa85A21w0hgiuTwFgY2ovkGoh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\51c98ead7e94e7f8909e96b6706a5adf.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          72b477086261b86017cd74209e83f70d

          SHA1

          34bd851031358306df689fd75bdde7bd8c978d1f

          SHA256

          50ba1f483427b1ca2fa595422a526ab8606db0ff47b1a85240aa2de3581f5a7d

          SHA512

          bb11fe7e7f69232bcc65e0e7eebe4492e2bb246e726afdcfbf6a0fd6f6c8e346f5b68e452f714807021e91bf862aafefde4dc021d2838f1b5bfae110893c780a