Analysis

  • max time kernel
    216s
  • max time network
    170s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 22:11

General

  • Target

    0545b2dcc57696931cdcb9648cbac300.pdf

  • Size

    89KB

  • MD5

    0545b2dcc57696931cdcb9648cbac300

  • SHA1

    19898fd628d84f10b3f1e86beea45f9d0ca73a94

  • SHA256

    fe8b8e044966389fc36cbb6363b8c18439d58af9e120498a774e4e07e51e730c

  • SHA512

    e7f62de36c7a2d71fe5e6df7a10249878b6b133228fbcc1a508a4e417f6097cf9b25d63b3e429cde04deaaba56648fba0fd8102f760af9c04ffbb0a8d57a3f4f

  • SSDEEP

    1536:1dVbnFxH23vZUjRvwaQF2szC0IvYA/07oHpZ3s3mZVZh/ADF24P4HwfJKzPtJWGH:JbnFxW/ZUj5+2szcYw0ypJ1ZVZh4k4In

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0545b2dcc57696931cdcb9648cbac300.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:792

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          7a4727e2bf988c4697531006e26be734

          SHA1

          645f309398f47f7546ce372c6a83ebd8511f606f

          SHA256

          ca0ad6c713518a25f8b4f8957062ca6e80fd2f7fb90afb0dd58aa6d34c1b64a7

          SHA512

          2b6bbc498bd358f5a946b70da6c09b0ef43ad1faad00ddabba1ab2b16404f1939c0b23be17541d16622a478fd6480725238abb2a0124fb57931f1de42443bb71