Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:50

General

  • Target

    0d17ae422f1e090e08cc84d1ae8e7d25.pdf

  • Size

    82KB

  • MD5

    0d17ae422f1e090e08cc84d1ae8e7d25

  • SHA1

    06954634cce1e1a7e5500d18764a5365f76ac539

  • SHA256

    3f12130e5a88b9da0f8758f14c4193f75a4a5665dcc05d4cc62bd7e73aaba910

  • SHA512

    754fbcd9b8b39f2afcc915ff151c151cd9d7871a3385fd5c58cf61a43ea8fca4391ddf8e548b900a186cef9178af3c7ab0eeac1519cdc6d7dc19dafeaf26ee24

  • SSDEEP

    1536:sBfwnvuhJlMxUV6twkfMQSAHSgtllu4YhirWezlDlPJWifdopWOpOaZmc948rj:i62JxVApfMQS+Sg3hYIhzlDlPAiFoia1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d17ae422f1e090e08cc84d1ae8e7d25.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3057b5a3fe901f8bcb19acbf42d3fc90

    SHA1

    3d33427dc3e4ab0ae7307e205382f46d36e9ed7d

    SHA256

    c3446864f07d2df24d7868a535bf807c2cacace35d6a8920e683ca38a8dfa29b

    SHA512

    870781253d2c7c96ac146d0cde4b5834d70e3b3c4cdc3186eb735c1a880a7eb3aa11243b4cbb530a2fedeaaab2ee01714a6a7a83c3acb480921415ec863a5d1a