Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2024, 01:59

General

  • Target

    bd5ed59ddb66c50a998e53061d8d22ac.pdf

  • Size

    86KB

  • MD5

    bd5ed59ddb66c50a998e53061d8d22ac

  • SHA1

    220fc96602648fc95e5c4ad66e711d9b7ed15a3a

  • SHA256

    ef39eb60c8bff3f753e965d2c343dd4e4cf1b93729f9331247d6e2f964a5bfc7

  • SHA512

    8e5cebae9f3103823a700daa17c3ff383e1936ff70a05c54a1b2ee6ead13b435c956dafe2e2f68c8c2c3e18c2c05c1011ab6c288d14c85535260b6a8d69590e6

  • SSDEEP

    1536:Yr88yHOhD6ay6gTLvuhlhP2/VTWGpOKjuK1VfTWOLO74bqMc:tLUD+vG9eqKaafzk4by

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bd5ed59ddb66c50a998e53061d8d22ac.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1908

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bc6b35bdc205f851a4b28512fb7febc4

          SHA1

          3d640f0291ed67d67e6f2acd6f40de32164c36ce

          SHA256

          f33aebda1d908d1c843d28a3d772960ec97ab1239b8be500b887445ebbf145e1

          SHA512

          c835349853251a4d9928cd984439514ce2ddc4815928ac9f4e282a882a3be7342eb47088dd5a87c2560098eabf8c576d329b46303d3db0d917d36354c384e905