Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24-12-2023 18:32

General

  • Target

    0c180d3ee37be3028f0efce7371f934f.pdf

  • Size

    68KB

  • MD5

    0c180d3ee37be3028f0efce7371f934f

  • SHA1

    962850e21b89168ecd101d7609566e58df6838aa

  • SHA256

    92a7aa4f1468ba85b09953e946d8046613122801b966e94c70e7796ec49493e8

  • SHA512

    98eea55592e6c20e3a50a9abc0658010628658bf16756035ad47f63fceb11d31d0ae5a08d16567f95b55d8a253a78bda064059229b3c1510158c4dd93f4a1a91

  • SSDEEP

    1536:Q/HpgJjaH6SONC+GaxMO3UKWEpMfCOdkybvSsFDhON+KJO+B9RPi:8gJjgNONdkO37p+FBDNFDhK+KJOi9E

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c180d3ee37be3028f0efce7371f934f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3d76a96757c7e6a925a1621c7549833f

    SHA1

    d52f014378e141aa287b00abba8c5987f45b8d06

    SHA256

    b90d88b3c756ab1e09fc36c03cd6d0c7eeb857c00c9e151f6deb76f313c935a1

    SHA512

    2c1f675cb182eced23caf0791cb01349e35358621fad0c77112aa7983c204698fc89f360e7e50de4a7e8f3e9e369e8eeeb5dcc31e83550059f5234c7cb730216