Analysis

  • max time kernel
    119s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 04:21

General

  • Target

    57f700e5ab19243154d9b97675100f57.pdf

  • Size

    71KB

  • MD5

    57f700e5ab19243154d9b97675100f57

  • SHA1

    9458ce14377a0d53eb9f4f40d6804ceca7149687

  • SHA256

    37b9061a2b4a996721e5b05dd31824cc63b3c28e0cb24764aa2f4c076effbbdf

  • SHA512

    6dd3fefd73f67dc0403c9adb976086939d3b75bfef1d0dc4128ed0dd82b0da5bdc4b94e5f0938940fa5de365bcf29354c2baaaf7dc84780990b9ec052d72ef09

  • SSDEEP

    1536:cPB+mT4vSrd4iSlkXlCFoHGRrozn2CmeiWJpoqtBHmS9w6m5J2i+NLjm:C+mTsStSykFoyE2CYW7oqtBnggNG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\57f700e5ab19243154d9b97675100f57.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    79c1e6002f2373e5b5d98478e642ce67

    SHA1

    269388b0bceceb60cf8f11602ea7f1c1030b08c1

    SHA256

    7dd53981f1ddd8b405cd0a99a892bbc0ee1abdded8b5e25cdd74b9e35e5d1fd5

    SHA512

    103658356ce6baf146767c0e0f2217907576bcfade6ee740992e211ff3b500b544a3a526f3ea91ef73441f09328047e1c004d887d79e6c647aa854bd42a736db