Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 13:21

General

  • Target

    56934131931722e0e28c52dc9a9e79f4.pdf

  • Size

    86KB

  • MD5

    56934131931722e0e28c52dc9a9e79f4

  • SHA1

    33974e5ca4f998773e3c5211686f177a8b36d7da

  • SHA256

    8ed5eb23ab8104901df61b9d91f3438d8d977eba03127535d96c26d533d44d8d

  • SHA512

    a17ac449da3ab988fe184c0afc9dd33338ea711fdcc68da5d73b44750b97a6391445313f0ab4000d0d940e0aa4e418721a0cbb07b33da8f6e3cf7e73527a7158

  • SSDEEP

    1536:2XBC/uFPO5t8XMkDkn7Tkm0xukJxIad66WQpOCoWhZE/qW3TVAMmOgLNi:JuKtDTk//Nd69CxZETTVZhx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\56934131931722e0e28c52dc9a9e79f4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5fa0601e96befb683f837483001c925d

    SHA1

    cb3d914809bf1669cc9701bf89b24f929f1388db

    SHA256

    9209eb2d3ad6471b5120c8b0ef974251e2f8946afaf3807ac69cb1837cb0e56b

    SHA512

    20248925c07e3d40d54d62a36450d7a1365530c75fc8f93b9d6fcffba3c6c4810f549672122ba9f79efffe032296b0cb5c1e3bfd6b3e98129d51c104aa338f2d