Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11-01-2024 02:23

General

  • Target

    5246defbef0210ab7bbf0f7f3e39c7ba.pdf

  • Size

    35KB

  • MD5

    5246defbef0210ab7bbf0f7f3e39c7ba

  • SHA1

    b79c0be63c1fbc26dd478ad63c8134988d79c183

  • SHA256

    d1cac988235ad76f38ff994aefc851614f904948961c3e2b11aa260dc01c2f24

  • SHA512

    248e3e05891ba933604420aa86c861c168f3a8782adc7695e232e5b954d87319f3c7acd02d2f38712a03c3109b1fdcbcf5a13cbc1e903e01341ccb4182296e1e

  • SSDEEP

    768:YgySoWRsXCPRyZz7KPNghCH5kCRrNUA5kVHcW/ltOW:KWmZz7gKoH5pdN1KHBdtOW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5246defbef0210ab7bbf0f7f3e39c7ba.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f601446da9421d93a8dc0629fd08edd5

    SHA1

    73708126adc39f82b525f5a0bf12f2b4dc4d4b20

    SHA256

    7e4333af5cb4086fea77ab101eb3c7f3e55fea441b2de3aeb5ec8868020483ad

    SHA512

    38739b9f8a2d20a2f5143a918308d77d5bc8e3975762a8a3648c7cd1d51ce9b8cb476db9811fce6c4fe96dbb3764edd9569422f0a47394c06e966e113f4bfa05