Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 20:29

General

  • Target

    518939d9dd218a36322b5fb81307a42b.pdf

  • Size

    82KB

  • MD5

    518939d9dd218a36322b5fb81307a42b

  • SHA1

    5236be87b7657382a95585ea7af5bc879b7fb72a

  • SHA256

    c0f034f95437aa7df3c43eb84c4495bcf4ceae2b39fd6c7549e21aa92364eaad

  • SHA512

    cf4a37b4d14b2b4f24672923e3ccf541ba07457f283d290819535575a18f65e1563536aaf70378f8316c180f2ddbdd51d354a20252dbc2f6cbc9a13b13363d24

  • SSDEEP

    1536:SuK0cOqzZUyHji6ScfhC51R4zPmRd7DyZgw4SB0TIWmejoQiHTykhiWwpOSfou6:JPZMZJHjHg1OzeT7Dy4g0TfXCVSa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\518939d9dd218a36322b5fb81307a42b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    30372e740c814b604a0a093ef43b46b0

    SHA1

    54ae7e3328c4eb9d0f3dce0b0b9e5b0836f94355

    SHA256

    a59296f45a9424234f6e0f455358a383b489902d53c18f18b66ce7cebc54d9da

    SHA512

    589639712d910c7c977b7e6c957ae61418c1f8dc43cbcfbad1bd8d5a9fb925f129dfe92572d4108d3ce2a6bc258888fafc5df75eb2f48e41fcc64c539bb4e1d0