Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11-01-2024 03:13

General

  • Target

    52615dd7c596ce4bb0e183acf48c9f69.pdf

  • Size

    97KB

  • MD5

    52615dd7c596ce4bb0e183acf48c9f69

  • SHA1

    56091ece55966e62bf4d43b583ac2db3208bde7d

  • SHA256

    a3a1eaa2ff068b1f22ed4c357ea74a4649a7ba429a0b275ac866a798bc930c5c

  • SHA512

    9083c79973b4d8a1661c853047a457a86224d571052d9e79cfdc20064383eca57196aa3200cd0650eddbc13377214527a1bbc7a1c9b4f6d0836e5550edf2c17d

  • SSDEEP

    1536:foJZRc1ASfkyMJi9BMWV8Qfd4CgEybOj8zyO97UapufoWlDq+DjQiMa+ebuqGj6L:EZG7kyP96Q9fdwGCmMuAWlrPtgVZd69

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\52615dd7c596ce4bb0e183acf48c9f69.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b1a512a7558a407585689bce188def62

    SHA1

    c86c0bef12982af75381980c1c968da381e12b96

    SHA256

    17e4b13bbbd4b83c6957d7f6cb9b9e68cb4baadde07faab563fe2c3b78d14f22

    SHA512

    c76e7e06d121119b06c1741c07b89a12da05a5f5a29224d8ab8dfc38e40c5d43bb5907ae93d8bfaec10d4739f31fefc1528f712a7186a9ca689b414440ac5687