Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 01:33

General

  • Target

    57a3134f736af27aaf59a7a1783a650d.pdf

  • Size

    46KB

  • MD5

    57a3134f736af27aaf59a7a1783a650d

  • SHA1

    9c3ac4ffa14253c6ef535b3c154d0374a7a37243

  • SHA256

    0bd688f804763e5dd968f27ca5c726d40c1758391122f4a176f1acd4d0dd5009

  • SHA512

    8fb9b886703c8e3a94ef4164db0da76cfebc4e8dd11ce45f9cc8a3874bd4b15353433f470127f183b396308d83cf2606bdd6a2b1a00d3f0fcb26380e1a94fc0a

  • SSDEEP

    768:aZHc8qNiRtRUybN0gGpdTbFMQAiKYddAyran+6AtA+R+uuwjDFH9yemBDp:SHGNCZKTxMQBPAyM+PtFRZuAdyb1p

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\57a3134f736af27aaf59a7a1783a650d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1736

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fc0c6cf7b2312ce231cb872548a6dfba

          SHA1

          2fdb76244675ead20a31262af53e2de125ed0818

          SHA256

          8fac06891ea383a5a018e0bcffcf85bfc6e002462f315712408c39eb9748ace7

          SHA512

          68ae27a889f651dc105c6a5c61300551eafefe4c530f385504d09127b329aac062ebe346becfeff606b700acb673b0af644317f5283b0a1fe20812b11754eefd