Analysis

  • max time kernel
    122s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 05:15

General

  • Target

    0739cb565ee34f0cdcb6f0b801e6f0f6.pdf

  • Size

    91KB

  • MD5

    0739cb565ee34f0cdcb6f0b801e6f0f6

  • SHA1

    a8fdc5ef2f38bc1b76dddddb8e6526267f57d9db

  • SHA256

    ead0f02b745f9ea02875fa8a37dd8be54852dc0a7aedc342484418c3be0e41b0

  • SHA512

    146e52c7bf0db6efe7733025c5d197a1e2feeeb56bdd9d65c4a321f82f5d9f082075d0815aae114c8706781d2373aeaeea633f8f64e9e69079564bf69084d22c

  • SSDEEP

    1536:ujdMCMC/VdUhHZCqIW2XXRLoxFtHmApYV4R3hWOpOaZEWgykjYXRpp:GMC18tZiXXRLoxHl04xaaZQcXl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0739cb565ee34f0cdcb6f0b801e6f0f6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    24287d46e02a6f652da470083752eb07

    SHA1

    826d5e536fdb5ba8e523060938fa62957048a464

    SHA256

    d9a899c47add7151780580e252380b19e62458546b4d4ac9fb04da2f9ec4013a

    SHA512

    4170d91c9a8d00b671da6a9a8ff224fc6f6f9e8bf587d75bbab47aceb37356d0ede20c54c3695746d36a895cc8efddfa562a216cd2384e6fb1a81b6bfd1abba4