Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    15/01/2024, 01:37

General

  • Target

    5bcbebbcdb6ccb10fd1be3ab847361ef.pdf

  • Size

    72KB

  • MD5

    5bcbebbcdb6ccb10fd1be3ab847361ef

  • SHA1

    c85bb655f17d6d834e731c26b8048276f8b31621

  • SHA256

    41be6b586c9d57df045a78d5efdd62cf92adbdc700394d609fba30c69bf4a5f0

  • SHA512

    89754a57fe8f36d611c6d6b7866ca510c97b528ecf724b89ff809072f5b16dda5c49c14ccda6a67bc42f443368b5db2907f0a03accb5705ffff3a2da2e6af3a2

  • SSDEEP

    1536:XfGgb+kAGBz3NdE0AD9+5LryUPtY/d29pW/sketEUgWLfg5WRz6uvdPD7XATR:KQBXZAD9+5/yUPO/wy+tEUxdRPdPD70

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5bcbebbcdb6ccb10fd1be3ab847361ef.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1716

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6e06fe8b96335f0d1ca3c8791a02d45c

          SHA1

          78739f2c4218bbf2b253ed0a86f8ae425ca287bf

          SHA256

          5f9c94f2ab6a64a93540865e4a8d4591028498fa5584816f16717d0149cf1f13

          SHA512

          a0d3b5b79fe38eb6639f453a5ea2edadc89bd39d4e3feb76bf5f235ab48e219181a73bbc1114e9a4039f78129dfd1c878b411d8e9a2ea381f9a1d614b8b5d805