Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12-01-2024 08:17

General

  • Target

    55f2061a5f9141d4ba84727def90e757.pdf

  • Size

    91KB

  • MD5

    55f2061a5f9141d4ba84727def90e757

  • SHA1

    b6156c262e3e9ae01c33ce58a17eceb991425706

  • SHA256

    e717c7286f01a716e649b7df9db8842df2dd7a2b3f268084222171987ab9e307

  • SHA512

    bb5ae9328a4d48ab2deef30448b344427f9880f29700f5358fefec4689725a865b4d7ff3ed32336915f90bdc4a41887a9cd83ea181f846f6c32ad5a579274c45

  • SSDEEP

    1536:5fi0qATQyhhdWpMBGk2L1GgoScfhZrTQ+dCpYGaAjziM7HP+iL422wx8Mzd1Q8nD:Zi0qIQyHd/Gk2LFoHh1TVCpYZAjz/7H1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\55f2061a5f9141d4ba84727def90e757.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dd3ab1fcb3ee46f52a1bfebdc21a6080

    SHA1

    ee83e7ca63f35934be1201a85cbc0b1654d9beae

    SHA256

    253312cc660df20042f5a58ac3ce820c44f14ebd685f338db895be73d0c4c895

    SHA512

    e142e1ec29c1a87aa0e874dce57b2a3dd7e7113c85a3dd0d903c2ed0dd91d5fe08d604e3695fb7ee5a176c6515a0d378e3b092e46a9694cc2cfea2b40447e49f