Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 02:59

General

  • Target

    57cdd568ca440778e5c2500a1989f9f4.pdf

  • Size

    86KB

  • MD5

    57cdd568ca440778e5c2500a1989f9f4

  • SHA1

    0824cf3c2022a41fcbb2df7c1d2f1d133e6e1461

  • SHA256

    6058bab3c35df2ea219c77b40b2e84a8fb650bd08d2bb7daa245fb1c7a7b2fe2

  • SHA512

    37580c8373e4ba4e4fe2d51b5d4818f97e72f5480e142378f53fe217245858f65d0bbdf2871697be9e6c55f3887e3aeb8fcab20306410f5e2bab7cac92c06f3f

  • SSDEEP

    1536:ZrAPgW5Um0W3l+CLZbhiEI5YCUfKFMIJv/WsEfXWcpOTCWPxFFB2cwFMXwDyNs:iYRs1+JCCSKFDhSf+Tr4cwF3H

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\57cdd568ca440778e5c2500a1989f9f4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1280

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          715bdc664e9a2c72e8932be4744be2c9

          SHA1

          73695329581f3e08cc2ddf90e1c62dcb96a89114

          SHA256

          1da11009e10b66797518a0323d73233865f8e5068bdf78c1273e5c27c9e1bb8b

          SHA512

          511ce32bd8461611d75d5008c18b7fd62b93f7400e10e60edd2a20ede2744d185e95ac3c6e4684c502d259cefffea057706933d8546ceaae1386701e053dabc2