Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05-03-2024 21:06

General

  • Target

    b5a8933af394109574bc8fe5ae2e6d7a.pdf

  • Size

    88KB

  • MD5

    b5a8933af394109574bc8fe5ae2e6d7a

  • SHA1

    047ab376ea405aaac45218070e1e6a484acd9dcf

  • SHA256

    6c92d2cf321f31e283cf1ecd457bb92d7d0a45fa20ae607408dd9abb91b97165

  • SHA512

    a61014ef2fed6dd9acf7ec2fa969ce3118b6173fe52e24429811b2dfc1599feb4164ac6573a5f5c9e8957e69a4a7c675695c5986e9f619726a2db605a0f17a88

  • SSDEEP

    1536:mWPoHnhPgpkysMT9VZQxVwOzeU/Mb1+WCbrREKWD/goWapOtQ5+6PVV:V8hYX9TZQ7xzeUkb1+1bdPRtQ5tj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b5a8933af394109574bc8fe5ae2e6d7a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b401a022b8292005f0ca54daded9a161

    SHA1

    594ac26738ad4ccbc794e9d23fbeccbeb3c4d74f

    SHA256

    2fd7818c732b8d4011f8beed42907952c9095d1ec917f17e921f99be8739962a

    SHA512

    792846fa3804054c8627fae3aac096abfef32621c4995928eb082a57bb19ea7cfef7c51524f60a7c97d9529e18626cf8327544ec256677a627392dd29b3f2505