Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 21:36

General

  • Target

    0496bca54bc8eec6b3d9f0399b1af26d.pdf

  • Size

    94KB

  • MD5

    0496bca54bc8eec6b3d9f0399b1af26d

  • SHA1

    b465fe7e828cddd566d56e07e9acd21a91f9e03b

  • SHA256

    0256fb210ece2353d5265ca2f5536e9204f7f3165528c0b5bc6adac702951466

  • SHA512

    1757dfe4cee755479054539589c58c3a40560e10f336d5d2000f2ad3af9030f4d5d5ec49140e7bb14906103e0ad78a6dab686eb87208c37e65f61b728090eb98

  • SSDEEP

    1536:FWM7zZsPVbLpUSjnm3bnzYyIzxYk1D5iWtI9qRRKIDz/en4wV2yNkIx3WQ4qW2pf:oM7leVbiSehINYIDAWt6IRKI3enrV2yb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0496bca54bc8eec6b3d9f0399b1af26d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7a6600b3d9f3353bef6374391fc9c4db

    SHA1

    0589bacbba951596fd8a7a4de8686b541cbf37bc

    SHA256

    ec2a2fd315dea4701c080b5df14e8539c0953a34c2690efcfe036d6a02228100

    SHA512

    8828446c859a219496d31948fab76aeec5a3036dda051d4034b5dcbfb0fa29fc865d210b6e89dc4e2f0dc01a419a32d3d65472583d40cd21cbbb2f8c9391bd6b