Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 21:56

General

  • Target

    04f3eae935cac82df4f769f46e92c0f8.pdf

  • Size

    80KB

  • MD5

    04f3eae935cac82df4f769f46e92c0f8

  • SHA1

    a5611dce6fea3c317181de8636330eecfc1a1e69

  • SHA256

    0f97ff85b3fb99cd17be8dd4c9697df9366ed83535616398448cd147801f5e66

  • SHA512

    0b263fa762768bd33fad4597bed7a6bdf978bdc883df26e1e4fbdb182e52de0eba8f28d1cff247fdb13a365c8830a142dacd7255637c5d824b1d23261293043c

  • SSDEEP

    1536:KNTZwo2Oubh/1Yr8/wHvUKPqsYlTNBaYAlrWGGqwVrqwdwIoeWspORI1m:6Zwo2OubQAUvDqsISY6mqwfoxRH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\04f3eae935cac82df4f769f46e92c0f8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ad41810a8009f1b8188397cced808fa5

          SHA1

          00d4e192dcde7b0ae5dc76c3ce38896f875528bb

          SHA256

          1bd560ea31b626167bb3a3fe1e09de0229367df34006913734278789f4d3c145

          SHA512

          574f8c0f4a67b66eafca74964cc9882f7c6a1ac6d08154dce7b3c610385b03b6d9ae4d6301449b2af355b7d69aabbee9fe1f78232ef1c199fd97d0fecf969afe