Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13-01-2024 09:23

General

  • Target

    58908461af66e1a5d9ed12dcc770d293.pdf

  • Size

    84KB

  • MD5

    58908461af66e1a5d9ed12dcc770d293

  • SHA1

    7b401aaccbba6d4e2d72769416f5f459a11b29fd

  • SHA256

    c219e07cc838fc3276a1752b1accbc2ea27b10fff29970568426c1277cbe4d10

  • SHA512

    dea8722472ecf0aa40bea5926239f8847bd9c620cec3d760861c30f79522b658c7a18a15f98822002edb631eb0d6ff76bd999a173dd586e267d1593da5c1cae4

  • SSDEEP

    1536:UfCsd3KWS8lf+PEgkXeRBRBpSakodmy/9yjSWgDQ2rQSgjBW8pO77ZB:ItdV+PSeRnBpSakodmy/Mi8j47T

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\58908461af66e1a5d9ed12dcc770d293.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    61a095a1b7a9439f174bc241c995cb3e

    SHA1

    cf906a6945c15559eb1fdd72ae0055115e0e0e69

    SHA256

    17999631d86cb2b9d148c1060af07d69dc691323529f4b3f33cb941fdd86f084

    SHA512

    e9f6e8587cabd9200c22bd9b6c3cfab430b4f5420c5800526d4a48b438f49c48fa8041c62f0947360405b5d96bd7441afbf320bbeff2670d41b7194d0f2368fa