Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 10:22

General

  • Target

    58ae2995e386ca3e6fd98f346d874093.pdf

  • Size

    78KB

  • MD5

    58ae2995e386ca3e6fd98f346d874093

  • SHA1

    2e060652f2796d7ce074a65115c0476d8174a71c

  • SHA256

    8b77d563833e927f07634d855f28c0c84589125f79b94b1d95319dcc26461db8

  • SHA512

    64b3ff6938b46bd6d26b3dacd6f7e9adb6dbd8c243a3735cbb10aff9f827294bdb18fbf02d0f454dd34ef8b358559251ab3b3bc5d5dc14c3c4daf86ecc005988

  • SSDEEP

    1536:H/fnyLrbt+GMSlMS7+naCqxniYZMImHAsFpmKyssHlAWWvrz4VxgWspORKF/eiSv:Xnst+GMSmS7+1qxiCMzHAslJsFOvnMxP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\58ae2995e386ca3e6fd98f346d874093.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2136

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          93d95f73069e5767ad9cc102f657e093

          SHA1

          841d3ceb44cfd76275ddec4b6ee134572497993c

          SHA256

          9028ecbebdfb72206224f94ca3afc1d7e31605f849e01f8a94d4289a382bd8a6

          SHA512

          121335d270e08bdb889d02bd4159970ed2fc234ff49ff2d2249a5f9edd22496686c42974131d0d16f266bcfe054a62cd4f76de033cecc6cd792ecb8fe5f98157