Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    15-01-2024 01:38

General

  • Target

    5bccdf92ce5e71ec9dc468de3ebb111c.pdf

  • Size

    33KB

  • MD5

    5bccdf92ce5e71ec9dc468de3ebb111c

  • SHA1

    109c39825c8bcea6d86413f4ef7c59ce6950c467

  • SHA256

    518bc7a1e51118daf23eb2b4003ae29b137c33ee63efa23ddd95522d1b3a8db4

  • SHA512

    8e77d829d9ea01fb2eebb4677e7cc4bc09afdf2b6cd3cc9bf6f7017ea4f0a78833b40349b8cf171d6ed237a56618373dd18dc4c5b867cdb695220adc8a4cf6d6

  • SSDEEP

    384:qtwdKpFvOcHeWZkN0sj09ULnoPI1/tr+DcshWkCUS3dzSMfSMO5EeyeLOACUSO:qy43HL1sj7Mwtr+xnmj9OGey833

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5bccdf92ce5e71ec9dc468de3ebb111c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    687a75d7b6827cca9b9d041619137a04

    SHA1

    6aa0695d60deeea8a2f3c5fcea255c36c3106e9f

    SHA256

    386481ac2d3b0f09cc398695f470ff5cf0b5736be51598456c24f2f76adf4f4f

    SHA512

    7ed4d18a73037afd2e7f391955b8843287920024177ada1d8f2e604dbc8d048f4a4c8d2f5fa8f0c62ae3088796862b9f4e4315bedd4c40297c954935d33ece5a