Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24-12-2023 18:35

General

  • Target

    0c50287b736e0ac9fbcca4c879279de0.pdf

  • Size

    87KB

  • MD5

    0c50287b736e0ac9fbcca4c879279de0

  • SHA1

    cdfe2a376fa345032cf9ed2e4c5cd7983de59397

  • SHA256

    3522c13072126494cd2c6b54ea23b6c50f30b4f20edc0c8a8b6cd3fd16ae0dca

  • SHA512

    4fc5c7d873a33496b5d17f432f73719962f9d2e8a4b1092b711a4b6cdf473c7372ea9dd109f73552f05ffdb04f15666b721e3d23bb6b5d0c1ce97a85ba0c90a3

  • SSDEEP

    1536:UVWLDxLKtvvNnf43okDVL9EG7ubg3qY+sQhrZJqauxWYbSlqlgiRMqWapOnaTh:mWL1LWNnf4jDd9EG7ubgl+sQhrZYa8OC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c50287b736e0ac9fbcca4c879279de0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    05af5743454041dcabee0794fef5a224

    SHA1

    76fed565e4b518e308372635d167f997a75fdbc6

    SHA256

    08eb81d30c30226aaad2655542587a58482987104a9637b1d749223eef7b3a85

    SHA512

    6c391b629fa2016ec4623f8eb175c50030396311d8e2e7ad7bf5028fb3d3c996c400a3ca01c2548f95350b18150336e1981e0ed82a9acb6ffdef1eceecf1ad0e