Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12-01-2024 12:16

General

  • Target

    566fff4258b019393a2a77df6bb57902.pdf

  • Size

    86KB

  • MD5

    566fff4258b019393a2a77df6bb57902

  • SHA1

    015d674c25decd402fef215da53e9b52597a28aa

  • SHA256

    2f4957a908b877c0a9418deba0688323784d824216f8ce01d527ed5a05529f5e

  • SHA512

    cbf45d45beb4de1e77870076e6d00d94624cbc94990aad52588de6c1410c3ec4ef1888d3710784fdd0ec8159e12ecb211108971c85357402c6209960835fb3ca

  • SSDEEP

    1536:tkCLDjaqGzDQ+AS42eciL0msez1BvuZsMeSUCsWHpOvTW9p4UXTVWv6XfBZeMEUD:lLaqGzDQYlfxeHv+1vUCkv4p4UhWvG3b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\566fff4258b019393a2a77df6bb57902.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fedd54dd1f123f76ad07428feb9e5cca

    SHA1

    33efd4156085a05cdfed4d780b2ce05b5372a2fc

    SHA256

    88661dc277bb443097eda943e8718a7ad6012be34ac3560980282e90bf1b616d

    SHA512

    96e4a25f3325cabcfdd81967653b804d1aae40d6bc319e28efed04928f2d2f05b1a264f6b435c8787b30baff3bd6e2d2ad5efb2852610c7c649b3d69e09bb198