Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11-01-2024 04:31

General

  • Target

    5289fae27e29ebbaa8dafd0b26d47fd9.pdf

  • Size

    78KB

  • MD5

    5289fae27e29ebbaa8dafd0b26d47fd9

  • SHA1

    4b47194178741f4d8cf09d56c090aa833d0990e1

  • SHA256

    42ab4e88097cc971ee6e100a9ed4418169aeac920f2dfb0fbb73b7ba0ffff04f

  • SHA512

    1cf5894dbf5d65e43af4b8569a4ff663bb67fb76f66fa58d24a115b152fe18824ed669bac0cd4ebc57269b3a8a376b80cfda34a790ffd059b5cb82860d5ea18e

  • SSDEEP

    1536:sJXVXIz922WOCFBr57DcaBRCKGk+MbtQxSWUpO7qW2LrTmpEpd0UbWm/xQuutr:sb492J9rV1RCKF+k6N7sLnmpEpdnbWwm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5289fae27e29ebbaa8dafd0b26d47fd9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    07e864dadc36b56b5a375046155c31c4

    SHA1

    f795fc0e12100a076a3260947e525a164b9f0776

    SHA256

    d78a47edc43c1a7a95ed0bc51cebf608a99e35cbd73092041571ef9936efb261

    SHA512

    349cc2658ffa2e4d76271ccf2cb509ee74d22c5625cc427dbd89598dc9334cb6887bc5469f45c2967029428aafb329243eb7193d36354040444787facc0da696