Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 16:14

General

  • Target

    53fb5d40ea452921a600ff5b721186d4.pdf

  • Size

    89KB

  • MD5

    53fb5d40ea452921a600ff5b721186d4

  • SHA1

    3a623edc0498933a0900af8a2e6ec5405d2b8226

  • SHA256

    408698e10b437e2095786f155bdd1172ece399517a12c8c2803f18947ed09cec

  • SHA512

    9da53a2067782c88531280457ebccd244bf223187278bc26cae6a976bea128d3850dcfc9d68741cd86388579ea68230dceb44db84cdc022e26494c64f0812d3c

  • SSDEEP

    1536:Ykou90Kq+N1YfqqABP27WjN2cwxzpnXusM8y+jMNIZQrRWsh5yPqRW+dh6W8pO+v:Vd90KG0Bu7NcwxzpnXIF+iyg/5ymW+dC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\53fb5d40ea452921a600ff5b721186d4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    354cb54950de4569d14c4bf77c7b3a42

    SHA1

    61bd9d0ec915e209f7616493d71a75768a7f6ee8

    SHA256

    779641a9fe346263af8871c1d7f6d6ef8220c764d943e5e70b389fdade7711ce

    SHA512

    e05eea0368e971edfe27d20869a6f99fad7d82eabfffc38151c0f62aea584318c2ead5f8bb4ab15b5cd40245fc152a7c91aaddefa3c3dd584dc47a2110df1ed3