Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 10:59

General

  • Target

    0eba3d8ce50b2a6a96259cabf3500fec.pdf

  • Size

    84KB

  • MD5

    0eba3d8ce50b2a6a96259cabf3500fec

  • SHA1

    33fa415c0e970a1b2be47b1f916022a15a799155

  • SHA256

    124e26138dfb946a91e9d6bf94e17e2f0c4f1859b1d2d97d022a04138acf4789

  • SHA512

    52ed26a0311ad695c7d427601a0b22a133c3dc9f0cf8e76de76ce88f418c276ce35e5fe54b81b37376ead00e9f2b702219ffb0c8391275aa649f6352bb292824

  • SSDEEP

    1536:0+qxo7hqDL6LGkg17ScJ9KApbRiuQIDA8M9Uek7SfJWOpOwredyKbWqTWwBm0akD:8G7U6nyScJ9KCRiuQTwSuwrQyKzWcm0d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0eba3d8ce50b2a6a96259cabf3500fec.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ef96b3464582eaa0bd6c710329f721c4

    SHA1

    639620511c8c7cfd17f0debcc05b60e15f6374b7

    SHA256

    51ecf3d270d27d9520a3c15c6bc0a1b1702839746b7973f718f6002a7bc2993b

    SHA512

    ab4b70ecf84f02bd84416908eb358224c3d3ef102c6650daf8568c76c52ea4a19b9b4255f5e65205943d5877e000135cddc8507601fcd82def9a6442bc8e17c7