Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 23:35

General

  • Target

    51ee791f56e2c8f15d3db8f2c195f894.pdf

  • Size

    74KB

  • MD5

    51ee791f56e2c8f15d3db8f2c195f894

  • SHA1

    15a62d784e07bede0230cfcaac83615321ccd786

  • SHA256

    647a98509562076e5d4f75a9439c82528a88960e6e7823384516056db0b1283d

  • SHA512

    c6cce3db73d6dbf4040707144bdde215521f77d791a567a06fc14530a36712e87b4018e61e25d41fe69bf03fe5d58b25d3ccfd9912ba01902b1ec43c521c18df

  • SSDEEP

    1536:Bd9KgKTDKTeOd/OuYm4aQKR3SiGe6kUmMiD2mz2WCpOViIWzLavShCSc7EAzX:3mBOd/OuYtK5yFiK2rVijeyc7EG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\51ee791f56e2c8f15d3db8f2c195f894.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f791a2d19244116d3f1b7746fe6d5fe7

          SHA1

          dd4b0f0e65d82b53d1073014ec1ed79ffb54cb6b

          SHA256

          7e77fe09eb2a16bbd8d563c512fadd2be92ea23cb11285316e9c80a81ff1eddb

          SHA512

          e7a499ef599bae91ed34e09e985e848e629424379b214becf8f017bf301d8858edeaf50f60fc838bc097be7f02547763240f02a4ba7d4dba6fe210b246ee9bb6