Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    11-01-2024 21:01

General

  • Target

    5491c5704fd3454a9baa3688bbd59e7a.pdf

  • Size

    41KB

  • MD5

    5491c5704fd3454a9baa3688bbd59e7a

  • SHA1

    89b1f24e951756f0b849d4271a3bee717661d45c

  • SHA256

    4d7dba216c93357b8b445411255ebe879e2aafb22dedd15b6378bfa1e76b6f20

  • SHA512

    09991e9aeb41ff1e95e176ebdac6c5ca4b701c919199a9f457ca262c9640865606fea7ed59304f7d448d29dd5829a0ec81cffdbb861c1564e7dc94bafaaa2240

  • SSDEEP

    768:1vvBzHTgZ/zfP4wA+H2y/IxDDyvkSxiRZICfdkDNOa+I0XCDk8V7J75KC+:1vv1cpM82y/IFDQJivIFV+7XCDk8V7Js

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5491c5704fd3454a9baa3688bbd59e7a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    46a4c23f80acb1a358453fd0110827c0

    SHA1

    6cea5b41d7d6c7fb5d5a899391b823c11382627a

    SHA256

    5b40332a1ee443491299564ae4a03c50c245d8fa231eb72eddb691dee6e4fd32

    SHA512

    6e2a524b60295b98fc1cdf8df7dad71e0d36575f9be4ef7c433a685a75db8fdd7c8d2b5bb6bfd15475b2a103bf2a6d14fb2c0da6900d1c98de3f63f6092496d9