Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 05:35

General

  • Target

    e5bd0d2278b1c4725ebbc2757087aea101333e17c256dfa5019ff48d8c8a0980.pdf

  • Size

    4.7MB

  • MD5

    18e19e14dd24190bb5f6fbcc4e31510b

  • SHA1

    1a1501a2ed52b71431fc5ad8d75a4f3a85873ad0

  • SHA256

    e5bd0d2278b1c4725ebbc2757087aea101333e17c256dfa5019ff48d8c8a0980

  • SHA512

    f09b63e4da9298cb7e633ecad58f3d2c0ee4f59e2b5eb7c4a25ff52fd8ad5285ab3ba21068b7bf29432f477b96e904bf284ec52c0ded55e5d33ee2ad7d64da60

  • SSDEEP

    49152:KDZ1sB1SnYFXqWvvm25hNfcpfFtjdPzd1qZEAMy267ZSTX7qNdkD+y/lrx87cnx7:7BMAlv+sapfMWJcSr7G6lRnI9M

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e5bd0d2278b1c4725ebbc2757087aea101333e17c256dfa5019ff48d8c8a0980.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2136

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1bd620bd801188aaa75c9319470125ec

          SHA1

          a7111f6d1df937a734b4af366ae670be44eb34d2

          SHA256

          3737e4b65184c8c5c414814137f00df9a057fd331befe61834c7fc152d192668

          SHA512

          a91da2ceb99df4e216592e7a8c30f71b8d8ead76277a5c2961b3ef953401fa569f7ccdea12a1726f7c06a3afa07d6c3cc81c5693b874e5f1f83ba14484a21b61