Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 10:40

General

  • Target

    0a86ee3fa128b799eeb53642b0499ad4.pdf

  • Size

    82KB

  • MD5

    0a86ee3fa128b799eeb53642b0499ad4

  • SHA1

    ea89675dacacf3632c23eea06deb767caeb51b77

  • SHA256

    9ea5b52fddccf5c9f73419b1adf9223f8d274473e0d79d376df4623cdda72e31

  • SHA512

    674c7bc5f34575887e3f702e6b208cc257fc54b7f65a83abb44c8df997d8524560be74ccdc0a60a3495089df134883e4265c451825a59b60670e57bc4919103b

  • SSDEEP

    1536:vubggwecfErfIfDaWy81Kjt1dVD7EoXuz4rAe7WTzl44qSgjE0fWUpO7PKj:2b/PMdfGG1st1TRpAeExZt6E0y7C

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0a86ee3fa128b799eeb53642b0499ad4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9a7cecf1a751bc592f2828e120c618fa

    SHA1

    5acb89e94405b47b7b58e153e2a8145dab7a99a3

    SHA256

    d8303e58b4675773c17907316a3c533c1495a2e55b0e7f89bb8612af6e06c65c

    SHA512

    626837a1d817ede8604cf4b174aad509b1d756c7ce84fa9f5dac9083f7d056e8c362938cf0bc4368c179f251865547515385f8e1f10f2a68b8ca76c1f20922cf