Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14-01-2024 06:19

General

  • Target

    5a808e6212c0fca628aafcad3bd13f5d.pdf

  • Size

    88KB

  • MD5

    5a808e6212c0fca628aafcad3bd13f5d

  • SHA1

    e91add3fb63cdce9cd4bb945ba3ce7541ffc3260

  • SHA256

    23d811d2a245c64fcbaa6a3c056bb84c07c6916369dabb8ca954892872bfc36b

  • SHA512

    07e95cc450c9944ccec7b491968b54c9667e6d6a0fa16bd7b673f1e61650c7b1e5fefbbc48b9987d306e777c92b88bdf5f5510a85bf31d7ecef6880b3b580d77

  • SSDEEP

    1536:YNlHdtgOb8kWiUWjBqrrB9q/8oEXCVP8SV0ME2vvdLEuWxApOGzWSlYCFAk5UPd:8JcOokWjeBqrrB9a8oYCVPTSMEMvdLEd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a808e6212c0fca628aafcad3bd13f5d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1820

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8a0a805ec771aa855f485e2acdd924c0

    SHA1

    918915c28e18a0f23c5c40cc4158a232b4066bc5

    SHA256

    18c56f9f17d23c5614614886a0487cfec72efa2197934e6aff3a5f2dc89241ea

    SHA512

    183c47bc330193d1721adbe125cf8941fc642b1c1fdb47a7606a4052152446b2ba2a395a1fd04f3805b851f2787d36a3cc2dac55a771364dff7150e0c24b2826