Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 21:26

General

  • Target

    0469aa15e8052cd1f59ed5eb14c9815d.pdf

  • Size

    30KB

  • MD5

    0469aa15e8052cd1f59ed5eb14c9815d

  • SHA1

    28349bb8311a772afc02178582931fb8ce2bc143

  • SHA256

    bcc618b4b170c8cac2dd028e9ca4f0c9c5f585755840a9b60faae148807d9003

  • SHA512

    74ca3a8266776b02ea28f80985543559900320c647c31419ac4bf2a7ba6e30477c6582f1ef085410939d54e8fc45e0c2f8ab8f5f0ff48092f8f2ceef1009dbb8

  • SSDEEP

    384:xDxcLvVMwnMu1P2xHl6OZOERrx+FzujrnCUS35F69ceaA6X/Yys4CUSCHJ:NqDdnMugrNBNx7Le61gwyNt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0469aa15e8052cd1f59ed5eb14c9815d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    da03252c0f3fdac7d3247ce9249a474a

    SHA1

    e436fdedaea134d75c41004b5e9ad26f88cad27e

    SHA256

    eec44f4ebdc66cba9a516f7d7eee1d3fdaa77d864b0ba446027354931f8696c9

    SHA512

    9955d06c31d6574d2e2a9d984f06550c4d5277f1c0847afed2a12f0abda9f9ab3ebf25489d1e2c63967d7d3ace653df3c021ca51fa039c31f1c2b84bc1838cef