Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 10:41

General

  • Target

    0ad1afa5c2da2c254fd44019cdf24529.pdf

  • Size

    82KB

  • MD5

    0ad1afa5c2da2c254fd44019cdf24529

  • SHA1

    e5208da0c3a7c4094b16e27005ef3b5b16b49723

  • SHA256

    04e4af6cc2ee4bcaa8c8f8555741011ab1618497d35feb395831ff6417330649

  • SHA512

    18c4b89ac4f318663cd6e8bb4ee3a91028ce766553f273b6e8a7fc49146bf82205724148b15a90f182e3ee1b52cfdab920536095e9130d1e2477461cdee91141

  • SSDEEP

    1536:fh7n5X/TK8fOgQiVmmnlBGKsVn3BNpRvorjUolk5DDIIEZNWapOtQ7FUWoCNbcKR:3vTZfNBGK+xNpB6j9kGfAtQxtNbcG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ad1afa5c2da2c254fd44019cdf24529.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    075c33c2cfbf66aa1d2a3fbe63c18264

    SHA1

    3d3754d331c4b1fc0ba1fdb1db923e821ccad27d

    SHA256

    6d84379121b0edd83a411a908b59a55f1573e5bf0bb83d4ba4ba69588cca0d9c

    SHA512

    e1fb98689e87997b4dc87133b8b607ea9f687ae068846330efc09edc9ac948b25832cdb5ca2eddec0a6f338f96b67a33373900c02340261330fdd94a7b18e63f