Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 14:36

General

  • Target

    53c79687c910f71e7e37e8b80f4c0603.pdf

  • Size

    87KB

  • MD5

    53c79687c910f71e7e37e8b80f4c0603

  • SHA1

    596190b4c8dd332e1ca186c3cb9525784d3703fd

  • SHA256

    3d898f8f46236324b96c9e64ac1b0f1d781c7d9206030308265d9dea322353d3

  • SHA512

    29e417047a300b1b925dee487e7979abab067fc08775be23c595a96b526a83d0140114f64ea532a2b4dab701a648a2db4916b69bcccf08886fe1c8ff88e80cb8

  • SSDEEP

    1536:/o0W3o49BuShy598yGkMphPKhwwuhXDJ8P7QJzWypOlLHfTAMW33C1yWK2LQ:7GoylhyUyMphPUuMlLrA7C1nm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\53c79687c910f71e7e37e8b80f4c0603.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2448

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e8e922c598e0bca33e620f698c4ee2b6

          SHA1

          bd5dbb64813539b3dcefa22de20eb3591e9ff7f7

          SHA256

          ebaead8fc4f7f9dd159214b0a2fe873dcee2561f81e0f987691f958a1c7ad02f

          SHA512

          3f23514823728eef91ed9030ab74bc0b36c8adda870f14407cd9eeba02695ec9f1c636ee9960e6043a20410c2ce35d23bccf7b63461393f835ea1335ccd324b7