Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 15:50

General

  • Target

    53ef8639c36e51bf617482430916b126.pdf

  • Size

    86KB

  • MD5

    53ef8639c36e51bf617482430916b126

  • SHA1

    d34d4a94fb2164dc8d2d2ce575b78a9d3f9adea2

  • SHA256

    b0a0a09d1dd75fa8eb656d8135caf1c25f6b677ae9a4a628bd3dd6a5e5c5101f

  • SHA512

    1895996f21320716d5dfb5205460f24810526ba31cf8fb2e9e07f17bd8c2eeabc58f24c50f63ce35236e798ee28713969fb139d02a6d7956ab9be04d551a7f82

  • SSDEEP

    1536:lq5jy6ljdBaVfz6RxoEAkaN5/cRR+EJb+5WzPVEABo+LcDmWbJOMtMGyWOpOaZ1V:+jvlpgVfaeEAk6liFJi8dFBo+LcD1JNY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\53ef8639c36e51bf617482430916b126.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bbb6194bc25cd5e5cc699eb5da93e372

    SHA1

    4cdc76754f2fc70b73fbdf8f3cfa4373635cc0c0

    SHA256

    db649725c5e6af412206bf3d73988aa582a3c775564099c2279dc6f887a5e20e

    SHA512

    33ce3b3052dc314cea26b5a6bf693a0815243ac13cf4660edc1903776356df9875bb9bd0ce84ac105cb0489cf140d35d3246658be78efff890d483e7d121841b