Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 13:59

General

  • Target

    50be94661a216433ef8b7ca1b8aad2fb.pdf

  • Size

    111KB

  • MD5

    50be94661a216433ef8b7ca1b8aad2fb

  • SHA1

    ac5254198e5fc3cdd19200236b5da00318b88eef

  • SHA256

    a4d237b6e3916f58b71ac853fbbd7b82dfc0e186c204000d39cc6702ae998ed2

  • SHA512

    f532f5d59a0d81279c705c301f6b98c3b2f8b3934309b0a997d5120499af100a90f7ce52f769a4b262817f4518432a8ca0f92cb094ed430eaaaf7387ef52d8f7

  • SSDEEP

    3072:9HQCvA9jpcHCklQrQKeR4L9D5VYzPIo6tr1/gbRo3u2T+GX:xVvAwiUETd3Ego6MbO+k

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\50be94661a216433ef8b7ca1b8aad2fb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1720

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0be7d1772a04a8f22eca89e296349954

          SHA1

          a07ef6a51a5ddacae879d659e10479ac50dbdd31

          SHA256

          7aeaa57f6f33d20c8a95a262d0bf1fa8364b6aa2c3800362f380e8009b5af218

          SHA512

          5fd42a93f33ffbd4f187596b897c1b7b82c1ef281e4c9c315243fbd6acd9de7f887ebc395288f407241ac55f13f8f6cbf97a7e41ace840317aee4db394863d51