Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 12:54

General

  • Target

    5684692df2051a3239acdb80b0bcbff3.pdf

  • Size

    89KB

  • MD5

    5684692df2051a3239acdb80b0bcbff3

  • SHA1

    6a4b874b72b94f75b8fe47916dd62726a92af984

  • SHA256

    561ab2fd6ad0a4ebe81d087e16f657a09bfc7cbafe10fc9228f595e2d5002b71

  • SHA512

    8f586eb3cf4448ec0476e54fa30ef1dc09ef226341b8ef12c21693eda3cf4aef6d32b77f49adf4831095e29da2ad3e54582e39d77e79f0188b5f665e660f86ec

  • SSDEEP

    1536:BES2P6AJG1LMBA22JdkvPINdmDkHGNMnc1d9nf1iWv6lpVxmoicorfh8oWepOZr3:TO6GsMAPUINdmDiGmc1736zVxmoirh8/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5684692df2051a3239acdb80b0bcbff3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2236

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c40a0459aea3d3eebf4beda934d36fa1

          SHA1

          6422a7742128cc611a2713d014cf3a5cad63f7bb

          SHA256

          0ab7b78bcbaf36e8928fc73b4911f2e174426a5a090e6109a99c63b80368c223

          SHA512

          385d0b5331a4084fafbfccfce2a458d1994aeffa42f8980a88d252221e2b80e9368c613206008e5923dc610451ad0d137091563b483419ccea609787367dd24c