Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2024, 20:57

General

  • Target

    b5a3c8532e1bc565a589248e54d677d1.pdf

  • Size

    91KB

  • MD5

    b5a3c8532e1bc565a589248e54d677d1

  • SHA1

    57c34328dac8e7bbbf3d91a81be7aa65234c0644

  • SHA256

    5c2afa953cb2426f1ebfae943192d35b88b9dde6bc71edb74b60463145a01652

  • SHA512

    085b2686cf745ce23857e83272f2c50bdb80bdc6eaab68786f8728a5c4608c5239be6ed25bdaaa241dd39ae8c4c4cf357cc4db2bc25143a29ed2bd97be63ac02

  • SSDEEP

    1536:OJOUXwPVkypRsXPwSqAr4DkvH0U/SSQdo9Fw6zfiWVIIYdEWznWUpO7siO:M7XwPVjpRsXPwC4w/0AKdo0snIIrWzaS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b5a3c8532e1bc565a589248e54d677d1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1952

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a6494da64b3f6bc5692826654b0c7e1c

          SHA1

          626883d76dbe5c25d2a21887f79341f2b8dc6721

          SHA256

          5cec392f5040bdd85e7abe6faf251cc253a620f3478015d7280bd72ddfedb4ae

          SHA512

          154c2dacf23f7c5c35fd97d65f48d3ac6ed8031763a8e5f471bf63abeca9d8d0f36efbd9569ffe87d804c26426485eed2c6d0c538cc5036ad21faea9c49e35e3