Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12-01-2024 00:27

General

  • Target

    54fd2f6c0209bf6f7948e1655cb7c608.pdf

  • Size

    92KB

  • MD5

    54fd2f6c0209bf6f7948e1655cb7c608

  • SHA1

    9540c3754d26d53c5ffcac5b44fcd2b47dcfe329

  • SHA256

    08237b5a0ce50356fc9975a6bb57504c1f802db47f2336989baf4f3bb28a2084

  • SHA512

    a07b5678f4de77970dc6a4371d45d8cbd1790b9f448c584483515c444e45ed6bb3d852f8ae999c9ac986483cc63cf4127bf888f12da44b5fed5f78bbe3657823

  • SSDEEP

    1536:uSbwnU/xngp0M2rOj2CgM8TBjWqPgSdTybO3TAzsE7sWypOlWWxaXlXhLSIX0uEB:JwnUaj2CgM4WagSdTyq3TAYE7dlDavSp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\54fd2f6c0209bf6f7948e1655cb7c608.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    80fad542801487ae5033dd263bb360fa

    SHA1

    c10a72dc20b1d95287ab9447f750911936392f67

    SHA256

    5d5fb1c89c21520b83a8cd55089872f2b650f44ef8e939d6c77678834af20981

    SHA512

    4ce7dccb7b9d43ea05a5693ba5d04a2991972f079828a21cacf1d56cc688ed75292cb455aa6ab776de007b4afc0a3cba4676d7e4ef42442144c7b98a7a46fa90