Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 21:28

General

  • Target

    b5b36d7d718f02189723bb5ddfaed79f.pdf

  • Size

    84KB

  • MD5

    b5b36d7d718f02189723bb5ddfaed79f

  • SHA1

    777771e267746ea0998606e9e9e5c09d0f245283

  • SHA256

    955cd510d57b45b5abdfaf9ce4e54d6885ab2b7eb3fe8f2da0064815d259d363

  • SHA512

    a8d246f94a65c97b5cf00943a6b45a196a95a05871cdaf2ae5237837a47e3a391a253ec3e97840a51058ddfbdb119d502b98c224b3e5faae30843d8f71ab238e

  • SSDEEP

    1536:W9FTasGdjfP/wSDaGQtBAX8H9FTBEAKgBdfgTpgoICCZFpBsI0hqQOlibNI:WjmsUjP/lDaBBAX8dFTWAKgBZ5BpKPql

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b5b36d7d718f02189723bb5ddfaed79f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    86b126e930ec1cff17d687490e3be6cd

    SHA1

    346fe9cdb1c0f6a16a526e278b4e9ff78bd7f386

    SHA256

    3f8af4057136dff67cd9107b43c10083775480a5e7d03593b6be23fccdf06bdc

    SHA512

    2ca72a48f04e7ab7bd02b986f57cb0ed8666836866700f69ac4d791d0c707a7cf333d439381750f463ec86a0787913fa203f4fa7de4267c1973857315bfba0b9