Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11-01-2024 04:21

General

  • Target

    528521a6dfb3cd018bbb931f19a33e5b.pdf

  • Size

    78KB

  • MD5

    528521a6dfb3cd018bbb931f19a33e5b

  • SHA1

    d3495a30c81d7ebb14f4287eeecaa969251391ce

  • SHA256

    f6d51de299a8b149ae90755f5b9ecac785c6504908d7779e492b3e2b91247d58

  • SHA512

    8e7c6f0d8f31e4ba00861fb238b24c32bca637397407f8519e9ed254c927e78f6c482c38870e42f98f86af74f14eea3aafbc958b8b7dafa2510cac5c50f404b8

  • SSDEEP

    1536:o2aphGHLKHqmCD+5lt+Qn8T7o0QJWS5XGk44aDkinkyWzPqzvmhEnU1pduGlWcpC:v8hTKm8+5ltk02tDkOiSzvmhESp4Zy6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\528521a6dfb3cd018bbb931f19a33e5b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    01a1f629a23c177ba1d9a41275325e5a

    SHA1

    b181527a88b93f9130e9619a83f3b4e203aae625

    SHA256

    ca83ac6a4eacb223f4257a6a4f17d1be7c1d2f780c6dda4c2abe15cb2b8e32be

    SHA512

    c6cffe10a1ab755429f14d036b9402835df2285b5a5ee9e81c82d0cc34459739147ddb047004f374d54cce273a0872c984180f08b0efccaa3e63772121b44c12