Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12-01-2024 02:59

General

  • Target

    554c868cfee2d171218194f3637e1052.pdf

  • Size

    87KB

  • MD5

    554c868cfee2d171218194f3637e1052

  • SHA1

    ce72ef9ad8e2bf45ed1537545334463a9c0ffe70

  • SHA256

    9ef27af668248b740af517ea2a90cdeb59558afd8b76a173d2ba20b5a8f02b13

  • SHA512

    9db9d1df5a33d0caab3e94f62fe013955bb18038a2fd932baee7b31bba58019aab821310adeb4fa14389b3d777d17579c95fb674f753b8fe8d0ff08271bf6396

  • SSDEEP

    1536:EeO9ihdGZldueXtYH2CQRsbot3vYgT4MeDFEcw6IWtw9bGWUpO74zlV:608/dueXtI2CQe0tQ44VpEcw6WbR76

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\554c868cfee2d171218194f3637e1052.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0c3feedd7fbff2d9be52d4c48fbace18

    SHA1

    8f518617b920be5ab0bad9f2cbdd6203e1b0f32c

    SHA256

    0696c67c3cf3d0022375b092822da901312c23d0c201f19878d256ac42f0f0fd

    SHA512

    3c756507e7cd35be5572a55d817d8c75b252acb70a8c6cca1ae467b96dfed2432ae19ccc5b3816c428d3022d806d517500d4675ca371e5607c58aafc3c9a0f0f