Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:39

General

  • Target

    0a54b81694cb8fd4ab77f748f7434e5a.pdf

  • Size

    87KB

  • MD5

    0a54b81694cb8fd4ab77f748f7434e5a

  • SHA1

    9bab8c5757015f341f4d9e21ab4f6b27cd6330d4

  • SHA256

    00a91835f1bfa1eba2fc0f190c2bb8e57f367652ae89ce909fed69b55de3ded7

  • SHA512

    7c9d78ded0b25f7959cc28c540b4f3e9e999fac7f8f306569e821afc323eb324188f293ddb27014d7da03041e7652775068bf9e7371daa0f6d4550728783c408

  • SSDEEP

    1536:0Tna7s4S6+yiW+fhInO9jyyq0+Nqis9RXFDPc/JWOpOwrKWod1acyFRwG:zY4S62W+fhIO9jyy8uPc/GwrK1acyF7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0a54b81694cb8fd4ab77f748f7434e5a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1648

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fb6bbbd956f6091e445f4272c575ee2f

          SHA1

          75e36f5393970f2a93cd95a2b59e8699ad33a1b3

          SHA256

          27b30f36bc5e3474080c2d8adb578bdf8a3ea1dae2b65949a9a094d024980f22

          SHA512

          366e70c119c8033d30fc25dfd91b1c8f62932dd1fe10a6d68bc5f40ac7dc97ad8cf96f950dfe0dab1d5ae7a873141fee08e2d274213e5c0ddfbef517a0437b54