Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 12:34

General

  • Target

    58ecf7970aa6037be5a6756c0e851dd7.pdf

  • Size

    86KB

  • MD5

    58ecf7970aa6037be5a6756c0e851dd7

  • SHA1

    64460defcbab1a99901b8eae72060b341370d8ee

  • SHA256

    a52198de9737175cd423d7a62bd24b497b2023a69c754bdc5a2e415066641c6b

  • SHA512

    e9e97533f5ecbee438f625096a706fb2706155a257893108c0db68222d5da1669132b882450de80ccad66b552f2b2724d5e5e0a67cbb8ebb4a352af56abd3289

  • SSDEEP

    1536:kHHPKggY0jg8kmPKYQrXdAauSIS94dY6yhqC7UlrgtnGhm79DHIWjMcWzE4XgWOS:+vNP0jlkDYQroS9NJ4C7UdgtGhm7tHTE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\58ecf7970aa6037be5a6756c0e851dd7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    de975aafaf4659ae1784911548cfc88f

    SHA1

    96af6ff9499c7eb1abf40c8188a583b8d9fe2aad

    SHA256

    5677d7813cd2b43decda031a7d61b145fc2da0681e6f0c48a287246a4d077a92

    SHA512

    c5aedb1a5b02580748ad3d373a85db2af523c42162193984d1362118a6701d700e3bfa969053e110f1ab8ce0ceda65748519086eaf1c4b093fd0922503e7a6db