Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13-01-2024 22:26

General

  • Target

    5991ece9676d3c63cc4ac55a6eb35fc0.pdf

  • Size

    80KB

  • MD5

    5991ece9676d3c63cc4ac55a6eb35fc0

  • SHA1

    9ea9476e8aa96e5b113b93608667498b1111cd91

  • SHA256

    dff903ff19aa39043cd46e1f9a1a4a82704ca14bb241828250b471f6fa6ac681

  • SHA512

    faf8a2a4d0f833cfc587ad666bba19f4c00f127bcb9625d42b79de005687c7c1a214efeaabcf609fde47d4c93480ea6b18fffc3ba90b7431f0580fb6809557a2

  • SSDEEP

    1536:N0zXcfjKSxi9H+sGqUw7OBsNMYK5JggjLgkciOcWnyrcvWUpO7seLd+:2zXcfGiiN+s17OBsSY6HLHciOjyrcC7o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5991ece9676d3c63cc4ac55a6eb35fc0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d232650fbffdf683bbde1d1f7c27ad52

    SHA1

    d46c9735566923bf17c4fecaf14bdae909c24efe

    SHA256

    405cb04cf2409ac86083a81f7849071ef8fbd8d221572849fc347809c8058fd4

    SHA512

    d8408c0e7040b1cd45c608cb88706762f7dac5a93615996dc87ef8dd063aacfb64aa3f5a454db8a300e13cb3a5fda47f2dbac25cfe8d1429e5bf2966225fbade