Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 10:51

General

  • Target

    0d84c19ab120ea271744d6624c5e164f.pdf

  • Size

    69KB

  • MD5

    0d84c19ab120ea271744d6624c5e164f

  • SHA1

    a46a54a50a7fc0989c4f9a0ab1503f6193c36d96

  • SHA256

    be4c2bcab2f2492b800563be19032a836727afce16a45466b74e3aac1b698ab7

  • SHA512

    82e155bd4dea878d7da432b5fcf1c9c4fdf87f881228cd4e57ad4dea0f59e91932094572d9da2ccf1f2c9b683eb6cae8d4d92746d3787e4c4c6da8b0c74be8ca

  • SSDEEP

    1536:xGJEB0ZJMm51urf4fSNPcnHWwNZSY4KW6pOu26WZ5AJf3T8tH6a:SC0ZCM1cAfn2iSY4Xu2j6K8a

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d84c19ab120ea271744d6624c5e164f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    36e11d5ddc53b416b2fae6ffa72ae51e

    SHA1

    86c9fb11ff98f68ab1978bf7867e0eda9e886665

    SHA256

    a8f2c924a6c5d8bd4e4b6819f91a0b26a6f219500f6fc1832c659fb8635a69ba

    SHA512

    1b944dd53d0800a222311ac7ea43fbce471ef87e26417aadd6ba22353804b4cad210337439ca2c830bd4e59a625689366d91d8439bfcf18c610306de45c0cdf7