Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 11:51

General

  • Target

    566266ffb9f5326bb396437f53125309.pdf

  • Size

    35KB

  • MD5

    566266ffb9f5326bb396437f53125309

  • SHA1

    4610a465b86f52735a9efe5ecadd5ada1be082e2

  • SHA256

    e1685500a4d8c88e2c62c35e75f4dac04e35b7db3ae0dff8b488053da7f00c3e

  • SHA512

    883a42c191ff93250a1c880dc0e48235f8aedb45c6556591438d03809b3eae226bd1b036a6bdb58da942d65f3a89b7f8266ee4665218e3dc3c6105a18b04c076

  • SSDEEP

    768:QvIFRIvO99ZaPdvEbmcObCxW/yfD55vOiNs0+0zbfwON:QAF8O99Za+qcpxW/yb55Xs0+0HfwON

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\566266ffb9f5326bb396437f53125309.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2236

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bd1d12df4dda0475938fa5332fcd24f2

          SHA1

          9d74a894aea71f5dd4c370a9bea2d800314b7ce1

          SHA256

          cf6c56935316d42445c9ddc8a0d3aa9f95a36e91460131faa4a2bb67b14f5e91

          SHA512

          f0de9de7277773341ae9ef0f4c3d3b9b7cf9d067bdb256700aea328ac7bf4abb932c497dd1b41f3ae265b31dcad8133a9e95ec47122ba04c382b7f856bfbcf96