Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 03:24

General

  • Target

    5a2420a61167961de52af38ce4f4a68b.pdf

  • Size

    89KB

  • MD5

    5a2420a61167961de52af38ce4f4a68b

  • SHA1

    0a94bab4f16a073c6ed56dad205de7fdea47e00f

  • SHA256

    8402c2c29a1d259853ef03909097a3ec0e2c443b011d0ce049e1c022b27f3da1

  • SHA512

    09e267b673d1891da52e85db7d7f11eb26ae2c18ddb8c9135a93c27205706c3d72f1ec8d4fbe77c6d63ec194d56a723d57c6ab4317c31c278d75d07a5ba5851d

  • SSDEEP

    1536:VKVzy4YIsVpxAjE8X/Yolq6f+oNCW8pOGupUaV3HBIWmQuKZtzxF9AY4I+:j4YD3xAg8PYJaGje3HBW4XxF9tL+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a2420a61167961de52af38ce4f4a68b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1536

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          49b75096a108c549bb92d215f477277a

          SHA1

          4e4a7a66540f89c0da385f19dbad7483537862f0

          SHA256

          56b25d16f570aaf43cba1af3f168bac885f365523c6352b73fece0e24ab5ba89

          SHA512

          d3702152c12d55d5ccb08d6dd3377d440756402ac7adc529f146248f7d15ba8311014b973d3283203a22f0a6a0ca8d20ecd37e3b02c278820ae84388adde4fcd