Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:41

General

  • Target

    0ace2eefe3ed2db6a6b1d698f1af4651.pdf

  • Size

    86KB

  • MD5

    0ace2eefe3ed2db6a6b1d698f1af4651

  • SHA1

    20010a2115e59062272238fc0a4b6b4af6a2deb3

  • SHA256

    536d2d06416f673c0728bc1f9839a88e030da5d45ea17fe7190a5465e2946ea9

  • SHA512

    0e62d9e84b21b9daf6b33f2479e88309775ff449118273d56b69cf665f614de6caf90039df3ff2b5fadfa5ce3e6970f7ccbc0c25ba4516c538c95c30ca359f4d

  • SSDEEP

    1536:HWbCoTLV6/pbBsZPI7KNB6B4CIQZ4zaCaW8pO73WWyfJUcC3jcbKdDXQVX:2bfURboUKf6B4Ct4bh7OhUcC3jcb6o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ace2eefe3ed2db6a6b1d698f1af4651.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1764

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          75f074d0e349daa71bf6ee86ed9c70eb

          SHA1

          e8e409b6c94d8991176977f03075d08b204d29f5

          SHA256

          3e70d9ccd2419e186f189cb54301f6c3bdfc9c79baafa8fbae0e9dda31666f57

          SHA512

          3a86a6f1d2fa15fc4d9b115f9df38c62ec8c9e32341dc88b0455a2595064e6516fa69f2f1c07433a933f20715c9dc48c6ba9994cd4de3a8e037d0baae77a4190