Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:10

General

  • Target

    10d5a60761478e2b57abd8004dd6c2ef.pdf

  • Size

    77KB

  • MD5

    10d5a60761478e2b57abd8004dd6c2ef

  • SHA1

    5babe4adee0b45432c0bc9599ff19af83d061846

  • SHA256

    d158a9e2404e263a17906abee22e8cb8fd39a8275a3a97a02e1348a608d18651

  • SHA512

    e2cfdc6ff994656321e4dbb9d840db64ead7861e5c61d8026c66ee0660bd7dc1e5407e2bbc8de3ee9bc44330b0a153cd4f7ff3c2a010c2048556e7b730ff906e

  • SSDEEP

    1536:Hn+OWZNrvWHIgfddYRttJspF8QrgUcIWlVQm2i2dWwpOSj9i:KPrbaQRtt+6QrlcVVQmYESc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10d5a60761478e2b57abd8004dd6c2ef.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2340

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5c221c715f63cd50962409702c6446ae

          SHA1

          413945e6bc4bec36ce14e8ab80fd767bdd76feba

          SHA256

          f723f040548f313211e7841e98970068514c2ffed052ab42c6cf12638aff5c43

          SHA512

          7d4186254c31a272179699b6ce77915768e09ea600f34d3b7f94c34b98eb58ca64e66e160272683761de87b64ce5834915905e69b2f21b1e7faffdcfb45db789