Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:54

General

  • Target

    0e2773d16e4ccf18cde568a91c3779ed.pdf

  • Size

    83KB

  • MD5

    0e2773d16e4ccf18cde568a91c3779ed

  • SHA1

    fcb2c0697db4a643b24c238fa8db063d740dac60

  • SHA256

    c1dbccebbd7c6a454d54f7ecb6b0d1b4cadc32e7906104e2ef81ac1f07275fc1

  • SHA512

    d33f7334000ba3f7ed348230bd7b916a0431a4f921929c9f1fcfffd2f045533c97f93252a237e69fc8a2d0b36239bef866b9dfa61e3b847c3f57e380dbaeb7bc

  • SSDEEP

    1536:BVtfpv4f6aG2RfjhzGDZ+9qwaBXqb8rPWOpOaZEWjUNW1aYefmSejV0:XJaf9RfFGDZ+9faBXqbdaZDaYamSsq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e2773d16e4ccf18cde568a91c3779ed.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    82508c2c30252186e3e287e1018364e9

    SHA1

    2434645eda88e3ebcbf8c3004db92fb626e8865c

    SHA256

    134964d9aa4fe4b0ad1b249d1051b827416d3a07f22cf12c112ffcbe0d64ea8e

    SHA512

    9ddcef2c9c862978fe9990a5951f0da87fe1c362f5f4fb3bc059d1ac030971b62cfac1790bdd55aa7e0a314b9aaf7955e2d228e669dbba13754fafd3d6644337