Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11-01-2024 06:49

General

  • Target

    52d3cb32fbfebbe582027a2b3b042d57.pdf

  • Size

    71KB

  • MD5

    52d3cb32fbfebbe582027a2b3b042d57

  • SHA1

    d0518211c60ff319b94e2833c319c8e3d71cef16

  • SHA256

    0d6fe309c235a152af35b74857dea660a55d38d7f4a18cebd88978dca71debf1

  • SHA512

    a63d65e295884969e24f20b44e9a007119addcbe4239867d79c3671b03f4a99c13e3570696f22bb226ded0c487adc017f8b11de8ba4052f2e977ffcbd9c9188e

  • SSDEEP

    1536:pPpa8pPI25SLzpri7oM56H9JOlHUQUDpQ0HLp8jEmL9KKHd5TCBd6w:ppaAI2kfpricrS0FDzd9tU52Bz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\52d3cb32fbfebbe582027a2b3b042d57.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ac4a2da8b932e429c63cd0627bb6a754

    SHA1

    e498b5c4b69da46012bb97e04205ce5ee1556890

    SHA256

    3f00e8c6df40e6b41b13ec2d43e78791ee570145a22f8604f79bd0d5dd51d2c3

    SHA512

    06a62b78f5ebd73bd18c8767ca32b9332fd41800bcfa3f8d519674c2a6e2006b829109c87594844ca85e832a3202889fb23f75b7f0bef7614852c5aa053ac6fd