Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 23:28

General

  • Target

    b5ed457557b19205e5c4b4722ad130d6.pdf

  • Size

    76KB

  • MD5

    b5ed457557b19205e5c4b4722ad130d6

  • SHA1

    cf71fd3a7a28ab0650552b6e90da3f7db990d2c9

  • SHA256

    e2a579d7abef8afe68f9f23278e3488f7218a71283acea349cd3fb2ae4266a9a

  • SHA512

    3f03f2ac8b1f0705eb9c19aae3605a7ffe9dd43e46a560d41c71afb7b9de8a6bc825df942c27c18f6e9ced54120468a31022b45426411cae1f98c4793492ef69

  • SSDEEP

    1536:P13vdmRMOG3olnkCiiBtjOvd5Xgpyvlk3t9qxU/jaHZNuYaaqnDgYvdtN46:N31XctkC1LOV5UGlk7EUbkZaaqPPb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b5ed457557b19205e5c4b4722ad130d6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d57b5e454630f87ca1bfbd32ee50a347

    SHA1

    9bfe95db742ca549fa9e961f37dcb56ba23acca2

    SHA256

    fa161fcb8dc05e5eae30fdf6ef77a3402d3842a674e3d3f2cee43121b19a725a

    SHA512

    e75179dbd81a004b4a94d559c4492b6b0e20d34343cb1c615f5520e574b37cdd3a8cbf3910f3bf253612d00bc8a6e055b0e24972f94cd73fe93275f19617c9ab