Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 03:34

General

  • Target

    57df4664a8f74a2209adc03db3e46c44.pdf

  • Size

    82KB

  • MD5

    57df4664a8f74a2209adc03db3e46c44

  • SHA1

    e2cec8c756da219f88f12ab7e5cb322e938a7c17

  • SHA256

    73fb1b2eedc1353ee2e67837f17cf3a8612af39e4a0238fe7f4f0896b5ece479

  • SHA512

    a0ac0c19b47001788552f902249bcefe0f90bd4ea2ef48b4d7594f3e1e61e21bbb4b690507b6a4356ce13a8fe441bca5a51756cef02cbccd1a80de3ac34bffe4

  • SSDEEP

    1536:QJVhjy8gblnLFYf1wQe0ZV6ND5FgyNkReAPBBZFyrWFAyipq+aKWGpOmN6K:QThDqlLSf6Mo5FY4A5BZgsipq+a7mN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\57df4664a8f74a2209adc03db3e46c44.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    289deca4f1390335b49bea526ec56b75

    SHA1

    2c2b6881b00e350046e56722d48e6cc6690cf374

    SHA256

    f6508bffaa8766dadf6bcc57df5cd3da04898203f4da005d57125398b3cfdb5e

    SHA512

    150afc5b0a77c893af078ce05b4d6828b87d659df73edfc681d0e2e67ed4e2cd172286ffc5c53e033053bcbf494979f2efe9465e903c7852a2fe379b867bb922