Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24-12-2023 15:00

General

  • Target

    02ac76af6748b6e4f7788a6b175a3a29.pdf

  • Size

    83KB

  • MD5

    02ac76af6748b6e4f7788a6b175a3a29

  • SHA1

    30c61ebe09a97fc6c054aaf05119f89da336e644

  • SHA256

    c82cda014821fff962b36d7d9cfa927efe09a84b3d7b16c8aad3d7f68f52dabd

  • SHA512

    77260e05b79d96c44c1441986e78f7de0f3d73e1eec67bbf92de9a16d865c0cf4d822e510dbc4e86cacca87c13264914fb3c2e8151d2403b002ba6db39da7cfe

  • SSDEEP

    1536:fZ6hKaz7lx3q4VtAZ/9KVEPDZzVZcYQ0etTZK2AZ4gWIA6oqbkbHW6pOu2++rUQg:5k7lUwo/9KVELrKYHeFAOqQbcu2++rg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\02ac76af6748b6e4f7788a6b175a3a29.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1472

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5ceb3ba610f1509f96e343de8182f7f9

    SHA1

    c230351244037ad0fcf7b4b13f3b7be274b43173

    SHA256

    96762b2e39ad76c63a7442952ab61fb06f62bf1fa8a525788d1a502c8eb4f2d8

    SHA512

    36a491e23a2af7a6e3c23edec364d292115d4cb1bd89660c32aea8d72b32aff93040d60283fd08d0f05d15ad4446fb34ed755b9d9e3ef9e019037952ef5b78ab