Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/12/2023, 18:30

General

  • Target

    0bfed72789d9926db6e290886df095ea.pdf

  • Size

    33KB

  • MD5

    0bfed72789d9926db6e290886df095ea

  • SHA1

    13f394369757f04be38489d6efae303de7590f68

  • SHA256

    fc65dbccdb203cf3766222df27307e86b3b9e8a41e020d2e0dfc547ce83d0687

  • SHA512

    f00c04ff9534302a7c554c92080dffb50b4aeadf459545b1bc0bfff9643033ae97d3b10394171c2cf3da447b3b31a3f5a7adb2960c5f74bdac060a05d727d918

  • SSDEEP

    768:/pWQqXraspMdT6R8j6Vy2yo1y09x+Dhac6UjynrOW1pmbzx:/5qX78jxW1F+kc6UjyrOipmbzx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0bfed72789d9926db6e290886df095ea.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9fbf517c6a9a1799d24927b854ecadcb

          SHA1

          a04de765bc8d90135500799e18bbc239319f8255

          SHA256

          0dc9b7d039330774581c4f2bcdbf07ba616e2428bfb64792536f21cfb9b92639

          SHA512

          bfc8879b49313b48bacd51568a71e7adb3e2226dfd7489dcc34f6ddf5be659db0898febf7b04bbb6b5dd8ebfcb0648bff1c8d684a110d018d7a6893c1d8078cd