Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 01:08

General

  • Target

    59e0f109acbff02b58053822c238aca8.pdf

  • Size

    15KB

  • MD5

    59e0f109acbff02b58053822c238aca8

  • SHA1

    0e94eee888e77e144a4c899c286d8d0ea3b75946

  • SHA256

    fb61ce2501c5a72248dacfea26bde5dbfb23ef75e55a1a36dc02999746846369

  • SHA512

    0bef7e34ddbb106b9a9e945053d6b0f89ab9a705602245b11815b885352e2d137d701b669af221320de99a8d9f7f6d55b265d33eaef12f17f9c460bc9d422cb9

  • SSDEEP

    192:RqDYZiIMqU+9Rj5lxVcJ93ehxyoG5ydYxyi1OcSHzm2FNS2V7wH0KyeXTsHsI+0Z:o2U+9RofSwQdgOcNKPV0jefMjfdGVmMN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\59e0f109acbff02b58053822c238aca8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2288

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          503d695d15415db6a73c7e41e5b2fcc3

          SHA1

          1dab772140e20611d45ef4d84d3bcb05e91dd782

          SHA256

          b833df44ba6803e8a05a142f187307413d01358b9487307b35123f02092caf2c

          SHA512

          6028aad9d7583a7df87ba1413a25d2f02d668ec4a204f4c828f4a1b9187185cc4ed076f9a87f57c5dd982a5d76b1230217f2b1ab523c15094489bab73743aa68