Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10-01-2024 18:22

General

  • Target

    5146019b1ad67a0b44daa61f038b3c70.pdf

  • Size

    45KB

  • MD5

    5146019b1ad67a0b44daa61f038b3c70

  • SHA1

    7493e3dc956ffffcc31ae1e308ee3460cfbe0b58

  • SHA256

    3805d6d5830b231a179dbdac6fda31f08f531798913041d5b2b085633e210832

  • SHA512

    b667b10627d52bafcdb4cb2284e948880b6553c43aeb958df609d76e804bf3aa12e542c2d1c55ecc98f86203c5d79717aae7a939ba8e61daef3e88893b201d01

  • SSDEEP

    768:yf+nkeSKbqg/vzqiKeoYQF0ClIBrI67YCr2cVTMg4jjRpl:nLbqg/W4oYTClsrv7fr2cVTMg0Pl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5146019b1ad67a0b44daa61f038b3c70.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a8cfba62c358ce63b027f992631bf20d

    SHA1

    ec6bbf0b4d54fca17db3eb4c95f575c7d614005e

    SHA256

    b39d29f1d2fd9530ce526fc9ec98daf3f2d7a50d981f7a3a59f5761a923888cd

    SHA512

    08048151d14ab13a3c07ad184f242aa3aaa4c2acbadc55e7803d5b599a4aac080a0f6e2837f2402e0df36eaa0170641b75bbcf4e3cf98e17d171d0fd35f93974