Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    01/02/2024, 04:59

General

  • Target

    85fe5fe761a8d0a734e56128b5148528.pdf

  • Size

    20KB

  • MD5

    85fe5fe761a8d0a734e56128b5148528

  • SHA1

    4b63f0c99f6fe94d5adec7666c886d82daed5b2a

  • SHA256

    96ad0cd245f2633b2ba138039a11eac3a3d33750eabc113a9dc5487a6fb87267

  • SHA512

    b0ebb853f9992f4a2744c558b786f99f81862d7a0de6e88de537105379e648794eb29a6e87f95254039c9f322425134f705fb3089f67fb62ffbc617aa6595e72

  • SSDEEP

    384:4Nzdnzv+7GWB3evCgF/buoIKXPh3Tj4gmZms1PW+sN2VJgL9GtZC:4pdnj1/bnfhjMr3WbNsJg4m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\85fe5fe761a8d0a734e56128b5148528.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1848

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4612e449756bc58e7e94c775ba52242b

          SHA1

          b165b623f22f5e963e28fecefc3c96e29bb2666a

          SHA256

          f43581a749ab9e58a499088faf7d1d0860bfe73d3bcda3451f94bd3437b21071

          SHA512

          e406a9596a5b913266f5b3843eb446c6eb048782c7c6f029938c1065440dd3ed9ecdbcf4bf3b6ca89209efe9b28405740263b307256a4057086814f33faee1ce