Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 02:00

General

  • Target

    57b14d5f35e15a55a0e2bf5f5eff2344.pdf

  • Size

    93KB

  • MD5

    57b14d5f35e15a55a0e2bf5f5eff2344

  • SHA1

    cafec1e907a788ca2195f96c960309cf27515c00

  • SHA256

    f3cf4f90f0ff2bad1e99fad31150e1d6920df97f153b5d42f0e0d54201a24fc3

  • SHA512

    ab201fea07bdead9808f634ded9be7da5dedb569217cf33bc0b4aa2dcb4610c70517711d57a8d87b85141fa1a32da0d3f691b151cf3edfe6e4107718af4963cb

  • SSDEEP

    1536:wYgmUmsIhRvY1oOQbgYIG/TbELasKTNj/AovU0jDdRT9AvEOU8CRS7WoU/Q+KT:Rg7FIhRvY15bYFTbELa5dM0jDdHAvsMH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\57b14d5f35e15a55a0e2bf5f5eff2344.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f06c5c5eea8c1a45b6e3aeaaa83576c9

    SHA1

    3d9fb219c13eb643b48551ce243309ded6beb3bd

    SHA256

    07d59b60ffa4aa29f971a0ace46a800e839ba66ba81318687080f92e8b692766

    SHA512

    fa2c6721bd04706b4e3a1a913a0d72ac10aa740997390e4e45145ca1e99d9588c3916b9c421802a902f09a9cd705627bdba0afa3e5382e683ae22b8339ffa41c