Analysis

  • max time kernel
    118s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 01:54

General

  • Target

    59f8d2563bb719dcfe5b059bb8ad1f20.pdf

  • Size

    83KB

  • MD5

    59f8d2563bb719dcfe5b059bb8ad1f20

  • SHA1

    98737a65124765dbe0ab083cd57cfe8936f443e3

  • SHA256

    ca33bebd3998b327e6067b69f5924076e7e808449383480e1c40c3b2d4c7cf48

  • SHA512

    6468b1f0651ca741071b08afe65a562a1d7560367a0572e42e9d38beaa08551a396d0067a008d25c4e48084d85a122103acbf5d879114fbeb51a610abb5a279b

  • SSDEEP

    1536:9WFTEKrWmF9whLtRUyoHfdbR/POxR+/tc50Sc4WmtihhGjuYZWbpONYdf:8FTfrWmKLkyoH1bpO3+G50NGtihpYbNs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\59f8d2563bb719dcfe5b059bb8ad1f20.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2120

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1632534b3785ba6d0e1d0a5c56a9ef4b

          SHA1

          1bd1a435b4882f6fab65d6ef89407fef29a1feb7

          SHA256

          0ed68104a12f29c62696654a599504f2b592800b09ea9ad13a20b12dadd0de0a

          SHA512

          fd3b173a8ea83aa242d193017c0948313cf98505badbf62a968d98495c9a288851be95e246721647bfe0a19d05c634bdf075fa81f4241c501013325c95e1d3a9