Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2024, 19:55

General

  • Target

    5470f0d9fceeac3160e0790cd5388020.pdf

  • Size

    34KB

  • MD5

    5470f0d9fceeac3160e0790cd5388020

  • SHA1

    c89cec60511bd5955a13fed3d71286afb3e73565

  • SHA256

    cec8db1f05eae8daef2f81b029dc95e67be23bc42ceeb8221efb4786f82b6efe

  • SHA512

    e9724e675fd8fc406f9f81295820d91702e12171e59d5f6ab40a6de512038025bfdb6f52a4f90be04c4b41226372ffc6f8f427f2bd85440a4cf3ba165b08da53

  • SSDEEP

    768:8vqkSxQYkpMk8aGOGP38R/Sk19asucH5p5sw9dLy89udy9jrXCgH6nDzCyHIfhOM:8vqkS+YMMk8aGOGP8R/Sk19OwfH9ud87

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5470f0d9fceeac3160e0790cd5388020.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f306ceac1bbf5d234a7bb5c03cf595d6

    SHA1

    10bce4213c72eb9d8e53299dce370af3dbc80843

    SHA256

    0890d9a18a69c266a275ac29b2df73f6f51a5e80718a79ca61d66e404c24dd65

    SHA512

    b3d6e80242e325c727c430e9f322e897fc9dc83855e49755ec5eaf23b70a4447ce92cc3eaf436c60b5913e0f9576598f60f998b74a64dd12b232364dda392e80