Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-02-2024 16:45

General

  • Target

    ac5d3fc78618bab1fef2d495c877258e.pdf

  • Size

    81KB

  • MD5

    ac5d3fc78618bab1fef2d495c877258e

  • SHA1

    b6e55c8c204e11c43735dabf527674c6a800b0ea

  • SHA256

    f602423e91b057973a8a9608859e953fc19a00b14bc623b43e29f3e120566d20

  • SHA512

    e8d4bbb8f2e45f8d314924e7d3dfc31e656e49adb328deddc5bd46fd42f073b3a02c96a9bad377550f6fc399db9b058e2e0bba09880041ee9cda0c8c22b975ef

  • SSDEEP

    1536:ILMrQNkpgZ2uhheUZ1wGb3LR/wi712BpEm2sxD2PJ0v3Hi6epO/IcEy8:kNpZ1/R/57kMmD2hE3Hi6gOgp9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac5d3fc78618bab1fef2d495c877258e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    50bd5ad55961969146e83dfc3219e3b1

    SHA1

    acc807e420b52f66925b14e5fe9a739298b3c754

    SHA256

    d67e8c40b81d08332ad1af86af09feac61fe75c5b2180e323955fae830691e23

    SHA512

    6002452203a75e804626f4ce29b9316a9b3c8f4b5ef30895ffe4284ec66d7795541df48aa4c3ff156efe0fd468b4afc3c0526803c396a3ad6bd1123a5f5254ea