Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24-12-2023 19:49

General

  • Target

    0ec971d0ce0804b3550d9e0fbfa2ec91.pdf

  • Size

    234KB

  • MD5

    0ec971d0ce0804b3550d9e0fbfa2ec91

  • SHA1

    f80c254af8cb9e8258ec42893c0f311c4b4040f1

  • SHA256

    3f0e17c700d988056d4f36c035cba955419d8a2ef9e53e0f7aa2f01940722ee5

  • SHA512

    3f5fa0141e8c94933ac662b3cf1ea6f338791df71440b5b88c6b7588c52bd618900a5913810722c812a32d26ee7c26a45a212f0175220993a87c462fb1f55834

  • SSDEEP

    6144:wJuPOUqACtoklicwabKU3zBbh0FIsDRH5DRO6QJGIYTWnf:wLVwcwaDjBmFIsVHdRuJHI6f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ec971d0ce0804b3550d9e0fbfa2ec91.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d7de7b79c6b888060c81cd25a048a8ef

    SHA1

    8ee2daa666308b393cf0a7b7a452590c113d7437

    SHA256

    ed80fb4e951d610cf9d00dc20b3ee6bd98f5c4f30459be76e1b2aa693aa9dafa

    SHA512

    324b9e0f8ca6fc09b20c340cff84e5ec1351c230cbf35a3f87782004b3e599a07502bdb38763dc6a974745703d4f56f5721a77ec75803dfde22f97568369d185