Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-03-2024 17:23

General

  • Target

    b53f0bb6a7b1625784106fc8f2e7506b.pdf

  • Size

    95KB

  • MD5

    b53f0bb6a7b1625784106fc8f2e7506b

  • SHA1

    4b62de4f0d26e8a0e830df383290a4093c155fe2

  • SHA256

    a78c0ccf1d0f233248d3e7966f8049fe69a3f0b7d9520cfa6af68e71a797f185

  • SHA512

    c905eb8415aab62f498c39ae7999567ff402692b2e24bc96ab8117dad4d1bad26eb27a27db917cfd97dd5c686cc98a0a57fb37c112717d0318d7c4a45078e106

  • SSDEEP

    1536:/0N909npGHI2YJVUJwSk9dhMOGfIBZEdpV0ArvBqIHPA5LwUrrWda+SA/woWxApT:cNajmJu9dimPEvrpqIIwUrrWpIh3GqQr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b53f0bb6a7b1625784106fc8f2e7506b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9d60f7eabd28851bf85eed7dcc09c1f3

    SHA1

    d0b5f92a1d29e506e8ae9f24bf4bcd1253de4aaa

    SHA256

    98b48807255bcaf1b454a4eb5a52d7a2b65295651893ae9f964af5587d2e1176

    SHA512

    15b39e0801545bbfe15d955d0662c58a09a64356b6d49f74d1fcc7ff4381e8949da21a930c7b95763ef943590ecf7b6d769be19bb0518e82863747ba875777d4