Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 20:12

General

  • Target

    5764dff841217b07be83944717422490.pdf

  • Size

    46KB

  • MD5

    5764dff841217b07be83944717422490

  • SHA1

    a8a5411cd0367726e151dd3d2137f80d8d334aa5

  • SHA256

    b07eb90b8778c2a0d14df3f13249450725ccdbdd01efb3621dde51efab001559

  • SHA512

    db6e9995a5445cb41f003302e8c2c9bce0f290e75e60d95028f639d9e271d68b12907376c70ed4af158e63225235c1903b89f42ece9c432931528e2a3d247d83

  • SSDEEP

    768:XmXx/g78YfezM7Iyxa7tL1tJbUtfqm1bkVfpoSJF1O9YG+mzhVryhSRnue0j8P:WBITfeWy1vOJbk5poOw9r+mz7WhmnueF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5764dff841217b07be83944717422490.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          da070c53a67f1e2f98df51014805e198

          SHA1

          206203f51379ad4386478a80cdaebe309938c604

          SHA256

          a174b14bd039d7182d3103789e5d388cb82704c88453567cc6d81af80ad61083

          SHA512

          63572db0259303ecfa5c33cdf1f209d795f3e9be22df2ca26d20a6bce6bb86a6a9efeef504364a9be8c22748204640a5d89c2719ff74f762bf3f643e4e8a95b7