Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 01:57

General

  • Target

    5239cc6dfc31a2e27ec7e7a3e8d8e2e6.pdf

  • Size

    86KB

  • MD5

    5239cc6dfc31a2e27ec7e7a3e8d8e2e6

  • SHA1

    5738ab53c01a6f48e1536a6f1cd93291bee5bb88

  • SHA256

    77968aeef114b8f6b21cd53af02a0488ad4d9863546049ee5047e33ae60f4c20

  • SHA512

    a4ce00798e086ecd383185dd1f65cdb963e7294302e176aea2829bd92eea6b6a9233e2445311cbdc6278abfd9acd1ee38a58d4a8d836363a33292e65ad4c904f

  • SSDEEP

    1536:wcJtxDQwj45jSDQr3ugGiP2Kd4fc9NB7H8iVE9yWgqdSarc1WUpO7ohZ:3QJ5j/r33GiP2nfcJ8GYcarcY7g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5239cc6dfc31a2e27ec7e7a3e8d8e2e6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dcad60f5c48036a9a58298b79f731f9e

    SHA1

    a01422130e065d395d538719a9a4562ea90d3b7f

    SHA256

    ab3799eb3faf7963fefa5677d65d17db75b67d7bbe87e102a1abc8a2299d2982

    SHA512

    f6b60951e91f9eef25ac5d3bb8718058c7a7b79b54064c87f2ae95e60797315648d0d591911018eeddd8cf32d335053aea7c87030184756cdbe2425d1f0e4157