Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 15:17

General

  • Target

    56cf534488b8afbac92eea301ef9a34a.pdf

  • Size

    85KB

  • MD5

    56cf534488b8afbac92eea301ef9a34a

  • SHA1

    9aee797873e4d9e25b07dc8e00b692bd5532eb0c

  • SHA256

    512eb8fb7229619723449e8810b7c8de55e9e57782fbb778429ac6407e59ad18

  • SHA512

    d9cbf50b749f8fb120058f5bdac4d916aa9244116906b671dcf22c1980e2461bab38ac28ebf8e89f0685c0f11735cd5d2dbc225fc10e237717c7c9494925d21d

  • SSDEEP

    1536:k0THbxQDpSSQK4RJ4MZCDoZC0epfaTKg3+/O3Vr5WcpOysjsX+Wxc4r2OvKER1b:77xWSSQNTdZT2faT5kSZAysqr9jKEj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\56cf534488b8afbac92eea301ef9a34a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1684

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6ba700a7128f217f505ca9abc72c1b8b

          SHA1

          13005dbf200c12c7aaab2213d729544754db5779

          SHA256

          d10422756889facbde4dff26cb04b57afaf256453736780332c958f3ba5a32a2

          SHA512

          d4f9dee2340146c769d4a08da09b355a77ea07a8e10bdc5433612152a3b6eb5f71aad3f798ed18a177121fddfae0926eea2ea08ded3a3b9b6311b549ccd7b7ee