Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11-01-2024 23:57

General

  • Target

    54ee51791e8e6124739d4950be742d82.pdf

  • Size

    83KB

  • MD5

    54ee51791e8e6124739d4950be742d82

  • SHA1

    b927af2657c78d08bbcc7dcd717c69eae6d3e31c

  • SHA256

    5cf7b59d24dc5d498abda5c95299abf14976fad34d27c14d800ecfd187a50bd5

  • SHA512

    9d05e1cccc8e27a13a57d52248b47b1b06a9a82361ecfe6bbc5dd882c41c9e941d604c8f5414c2583a2fc066f43276a6c202e018d22fb9488455650b803328ed

  • SSDEEP

    1536:i+WFjfVbh7YCv8NStikCrJNdoNFeFZaJnkqoB9SmqPW7X5dPs7CUCwWQpOCE1B:6tVt3vJ0XdoNwknmWkd0WUCfCI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\54ee51791e8e6124739d4950be742d82.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    917f9572537a9e12e6c0d431b11e8d16

    SHA1

    289764f25f19176ccb7af093115a34dd6c2eee82

    SHA256

    2dbf47cc19579924c86e75fd903cbe43b1b3cbad088f585d7a4909f30c054ff9

    SHA512

    ab34acab800ee1295c66f8d59531a9be462105f349748a8b7636e57ff265b3a9484626898056d4954985d69d6a4470d48b98c3b0434651f0aaa7faa4e286612d