Analysis

  • max time kernel
    159s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 23:54

General

  • Target

    07aabb148cd406d6c5d3168b37213555.pdf

  • Size

    94KB

  • MD5

    07aabb148cd406d6c5d3168b37213555

  • SHA1

    354029946f66352326fd6f4edb0b3be7fca55742

  • SHA256

    5e48bdc9e1192a915f923bb3a057b2671672eda90135ae1d5fa435dbdb2f2ba3

  • SHA512

    c7340eb8e94be2d19f7f7db91970fbdc08dee254d0b1ee64f02e6b76105b5216e0b9c0dbe434041a67335d643dd6bced0d5d243ad7b27f61bcc9533a7fd8f38d

  • SSDEEP

    1536:ttWH356MMz8VoFZjFiFeIX195uyx+GWc0zhzU3Wq3tPQOOTOgMwXcWQpOCelIn+z:CX56Mf0ZBiFeIduyx+GUlzUXPXYOgMwR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07aabb148cd406d6c5d3168b37213555.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2664

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2a1f7eee25f7be27b3f140e770abf2b0

    SHA1

    326fc5b12e905a49bfc3526c44ec4d54eee8bbb7

    SHA256

    e38af18fb7827fb0db3a8e9352af269296700234595ea498462ac046550124bc

    SHA512

    a768e171877855f74403d772ead2fb6e74bbba83d94a1bcc7ce411144e2325102aaedde84bbb4a7d62049b476f9c4b96de4025c61878ef314033db620fd133f9