Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 11:24

General

  • Target

    5b1e57fe1c351f4a4cffe21cd4d6a960.pdf

  • Size

    98KB

  • MD5

    5b1e57fe1c351f4a4cffe21cd4d6a960

  • SHA1

    4eb310b5072ae174ee395f51514d674fdf62c9db

  • SHA256

    9f1a44238f3b3c66c0597a4dd211fca625a3bc5d3d3d903f5cf43f8ff83a8fbf

  • SHA512

    0a10cf70684dce3f2b28f642bc150aaf09ac699a72a00622c3124c3000f504f468fa46ef186bd469c7ee6ae83df2f9f3a150789eb628cb8a6e8b2f264a2a171f

  • SSDEEP

    1536:UQPA5ucUs+xZbp9/2WwLObNWFC/S73IvBrw0vsj3wV9FcmKJPEM5CF1YUqE4kGhD:uEc/+NpslC/kOGeWw/KJPNoYvE4kGhD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b1e57fe1c351f4a4cffe21cd4d6a960.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2652

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          618cc29935cb21d4d41cf789cda715a2

          SHA1

          9e7a29fc6d2a727b210d821ec60364566090e0f6

          SHA256

          2364bc4e02a0a8b04dbbd9dfc95ed57e6dfa139e357edd7f7f9a5617fb91915b

          SHA512

          731f9f3e94ea5c3c1acdc5a5007cae2ac62c2b35dfd6850a4cdbff0f4d2ad68ca81d196a2a48354247bf936562e0b38d79b00c484614ab581fa4303727510657