Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13-01-2024 11:18

General

  • Target

    58c9ed2defeea7a07257b2f97458788f.pdf

  • Size

    77KB

  • MD5

    58c9ed2defeea7a07257b2f97458788f

  • SHA1

    80807e13f5fa887012c800a7bb2e3260a2c969f9

  • SHA256

    1ab8e973532a6fdf685c1e0cafd593acd13d204b5614494b038d0406c3dd896d

  • SHA512

    eaa9775dd9227300ee51e4015b5daf95ac256d5f81cca9400b9d6c1be5d96543e72f775244bec6d9d1b0bf2e32480b68e7c53057ba65c68ba41ff19b43a302b7

  • SSDEEP

    1536:lJk1zbkXz5dBpu/y3c+G3hxZBnbkOvoULoUY66QIOtWWpOxOv9PCWlFUxe/b/OX:lW1gDzBpu63cf3fMUUUY5ZxOv9PfmG+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\58c9ed2defeea7a07257b2f97458788f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8af6db51671941dd8d25d8aa32259724

    SHA1

    9e4e8d9c3828f588a3ae51b2677e152bf7ba6a39

    SHA256

    0e49dddf6f9fc94cfadd944159f2b37dfd063c8553d18c27eb325867ca2826d4

    SHA512

    f5ebbbdff9a74ffc7f604a01b827aafa481cc0a7b62f4681470494a956cd2a8e6dbc08775ea88626e46458c91daf8376a6e7670b5553b33c3cf8e3b449efd1db