Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 02:15

General

  • Target

    5535d80bd19dee8ee6b90be6091c79a3.pdf

  • Size

    86KB

  • MD5

    5535d80bd19dee8ee6b90be6091c79a3

  • SHA1

    112b0730132661178d445ae7ea222002642eb7db

  • SHA256

    31c9cf507900850f44fb031960066bb1179e99b54a3aae4a6678d2da1bb67946

  • SHA512

    e4d38bf6c93cbb955fc1446bd4c9401fc87fe3d773537102e945593a73b3dbca8c5f92d1a03dec28069fdcf79d5c1ea56b47a52a26c37d7aa7bfd33a6b5c5288

  • SSDEEP

    1536:SDhWuoLJRrfj4e5cKWS5WaTBA+RfFU5uICIykIWaJ2y+4WwpOSl/g:0Wbvrce5iSAaT3FU5uICIyko2y+HSu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5535d80bd19dee8ee6b90be6091c79a3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1540

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0d71acda10dfe44d061984bdd638a357

          SHA1

          22efd386d15d7003658aebcf9975175940bc53b7

          SHA256

          1c0f3b0e48db2ada6945baddb43d4f66248737540ededf9fecddd8145771a2cb

          SHA512

          0ac8ed7e918a399df86085088a051bbadd23e088f7e7224385a0bae2aaf6a6bc76379f80f64cf2791f6ed8bc92ae091ef22d103d39236d206c251a13a2d12781