Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 21:43

General

  • Target

    b5ba91bd5d0202112c824ab644bcda75.pdf

  • Size

    78KB

  • MD5

    b5ba91bd5d0202112c824ab644bcda75

  • SHA1

    19d0b300e4d3d301149b7819fd48f805594ac6c0

  • SHA256

    a82eea51556513f81a3c8c9dc1a71ba11c46d1ac7715c8f5e31278e01c6db2e9

  • SHA512

    94e127e24918244faf36b69c30fcc7f1e8083f66b72f05fce957071f27f681cd19bd6dfa30e86159ccc46fa9f27a9a46481c84f9be529cd69de0eb094ba5899a

  • SSDEEP

    1536:9lkZcu9ZtqMnxnLELpjNsoKz4oG1Sk4RVWJpQFHqmPKoKAizWOpOwrHb5:0Oi15Ef1kRHYFzQwr9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b5ba91bd5d0202112c824ab644bcda75.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2268

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          55d6c0beda92dd0abd00f8af8a393d1a

          SHA1

          63d3b86b336e744b1e4ebcf3a86028754bcd0c80

          SHA256

          58e45cdfad21f0ad86cf5f84eefe24c113d465761961a29eb1a7fee4b3b8ee9a

          SHA512

          899646ec5cb7ff6c935c4927acf59ee20dd9c630047810b558bcdae95878b1dd02ecf6830d651ff6c4729004bfa03e469b97fae55a98a9d3ff3845c29a21f5b5