Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:00

General

  • Target

    0eeabd6b99e355b5828bc6d0e5fe6d8a.pdf

  • Size

    70KB

  • MD5

    0eeabd6b99e355b5828bc6d0e5fe6d8a

  • SHA1

    246f9686c05cb74ca5e19a4e5eab5861ac7e7166

  • SHA256

    a35c1aa59e9016dfcd31f6e9d307f6fb7e5e78663a0c92e745f5c68f7fced37f

  • SHA512

    268457e563ac25a12155577dae8ca2b68833035ddf1fff016cf87d47a6aa7f15da9bdb6e075a93774a0f3afb2dbe056a9f27f112fb67d91ea8f074a1388a8087

  • SSDEEP

    1536:fhKkrGuOGF0plP5y68R0vV9RuL/Yqn91wYjbZNDKKAKpyBV6Qwq2J+HW8H:p4CF0rRn9RuL/Ln9Tb/JAKpqVfVU+HJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0eeabd6b99e355b5828bc6d0e5fe6d8a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          850bbbd7964a3b4d6f29e2ac349ebdda

          SHA1

          b65019cad6e6a6097be32999980c1acb70138da8

          SHA256

          b474c064244bfc940cf12e149181aefa80794426db173e77e82e3d59c5725526

          SHA512

          856d30ad88e02b7170bd6f24080be540bfe56ce0ab316b633f42b87e4118c9ed9de3d65c283e1a9604fc7795627f9709fa15f917e8dfa944858f1dfb76d715d8