Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/02/2024, 01:48

General

  • Target

    859c93c4146e9f77480bdaca0503b07c.pdf

  • Size

    85KB

  • MD5

    859c93c4146e9f77480bdaca0503b07c

  • SHA1

    b811b6350161f50c29ca3256e093690f2a0e3e6c

  • SHA256

    0169720ce23a32b74460b16c6b9526622c13e9bda7c11fcd3e53695d17353b70

  • SHA512

    44dc0ec4b1a3e015e7fdf11f2cf0143136f6cc4f32a20d1c5de184babf06f6c709bf7b457d2da77bd6b56bb15c75b0f180a8835cbd4d9575ecd8e4dd93611ad6

  • SSDEEP

    1536:mJ56zpsuLk5DPgGVAv1Vd/Nu04EtFluQMte7nK5nWkNpOPaWteJD8SX8hye/:SQpsuck91ViBEtFl5MsDtPm8SXur

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\859c93c4146e9f77480bdaca0503b07c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1988

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5e24f382bf0cd69704f92373d35339e7

          SHA1

          efd33c82ca45c9e5e96a4ff8e4e162cdf1445f11

          SHA256

          0338238d72cd14b3867fe073bdc6050dc2415de3abfd9425fd2835b755be047c

          SHA512

          d9d992d848adb005d9cc34660c8499cd7e5a3999a138200c350188e9366978bf32237d7cd9c793844e9fcbf4e2cbf864e8d4aa6233ca15e164a31fbc22b78ddf