Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13-01-2024 02:05

General

  • Target

    57b3d6be55ca16f3698ee7a28bccfac1.pdf

  • Size

    85KB

  • MD5

    57b3d6be55ca16f3698ee7a28bccfac1

  • SHA1

    b3a7013c65f76b22db5730b1d7dff8c0957ae8f5

  • SHA256

    797b0860717d719dd7dcbe1ed8d98937d1fdca1665c5424511c865e9f6fc2981

  • SHA512

    1eb29bd1566678b336dfe753bdad34f41e2d51c7174097e991eff8bd84098a5dfa545f0132cab3dbf80296c1bdc13db04f2c2a200d18d1078af9dd29eca1ec9c

  • SSDEEP

    1536:WxTIjEmLpqCjGNeWfDrLx5taoewzGuG5haMaL9/wsOIYUiVpLJI+DZW8pOGEWvme:seqSGsQrx5tahwSuYcx6IynsGrHeItce

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\57b3d6be55ca16f3698ee7a28bccfac1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    352835a39821d8f67b14e75cfd3c92c1

    SHA1

    f75efdd4aece34a5772da814a34186216d03206e

    SHA256

    b0f20bff77d7d6af3fe75783150e952a32167caaaf98016a5731e3a58def7cb0

    SHA512

    552a84082d1b4538c9d716f4f008ce0f33ef37de3aa94e91a1eb5e36ae5b4b3e9aed8b90eb0ab719d32aa1f8078c4dc8473c366661b866cbccd1c72faa14916c