Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10-01-2024 13:50

General

  • Target

    50ba45c396fe72ffadcff01eca9dcb15.pdf

  • Size

    88KB

  • MD5

    50ba45c396fe72ffadcff01eca9dcb15

  • SHA1

    342941ba18a6fb9010ddd69276d65ef727b6def0

  • SHA256

    1c39986e15ca2ae86467f4b2a213edaaff691cbb8f4db161715f30e0fc6fc2e2

  • SHA512

    e73f0521aa8cf5cfe53bde187370ef4e3608cd90458e660d1337652ce15f3d97a246132fe9c53591b074550abafab2496678904659f07e3ad87dc6e03f255b76

  • SSDEEP

    1536:P+K8pZBrkKiLCFsgz0Kst/dUozQJ3uB19I7+tgVdqW9cGRBxWapOtQDqh4xeSVY:2K89rFiLCmS4iozQJ+5I7Zd7cAB+tQD0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\50ba45c396fe72ffadcff01eca9dcb15.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    64c244d0ef3131420c46a8556f9dd19d

    SHA1

    f3e6cef51b26b8bf6146e718569886e33cd7789c

    SHA256

    d47484b0b1ecc05f0db7bd6846fe287e7f19fd795507a00a02048c4e65202017

    SHA512

    fe489afae4363d290df5840afafbf1be7a5f54b63dd8cc14de5fb76f14191f8400039a2fe84dd876c3a5d8bc4d79c0ee44f87f5e5e712e26c4096ce6d8b71f6c