Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:38

General

  • Target

    0a1c5fae9300585806230fd1dd3264ef.pdf

  • Size

    81KB

  • MD5

    0a1c5fae9300585806230fd1dd3264ef

  • SHA1

    f5ad4cbabc853a6fd00d8bac51e55d2103119e36

  • SHA256

    18cdcb557a017e00c8ed5698f7c4bff83ff778d46519a3b18aa4b31c5bfb6030

  • SHA512

    d3534a3b428331b801c3be25317d22fd255f9a32b4c6a19280ca608f8def11bca88a3ac3948f8637c4f02d0a87606d2ea6fa7ef79bca4c633ad60008b1deddbe

  • SSDEEP

    1536:er5W+LN3NxWZJQDnItvp9r5PULFHb+u0NxzmWwiRov8eN3NWxApOGhqdCzM:8PNdxWZJQ2D5PULFHb+rui+Xq3GIdD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0a1c5fae9300585806230fd1dd3264ef.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a4ec5911952a0690cd221d9274891474

          SHA1

          99242b9c05f5e8db4a4e3fd1e8e6ebc7b24dffa4

          SHA256

          2cbea39b8bec4d8f4fa30126a5c5f9b16ad7cbf0349047d168d86ce688e68593

          SHA512

          97ff74c3ab37042246118d73296387407eaf6afb4bcbe8fd4f1b4a4b33da467c37b043a0a2b9147087cf406601e0a57b861fe1f589d0b48dfc03067226905ecf