Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:47

General

  • Target

    00e1d79f7d0d75b81a634b2391fffc47.pdf

  • Size

    90KB

  • MD5

    00e1d79f7d0d75b81a634b2391fffc47

  • SHA1

    e07a85839e92c3eabb655a486981ecc2f045ffe3

  • SHA256

    74cff8996517eea882a3a0c6b3ef28af8ce95ac1dbc33a7d5a287b72c0c65f3e

  • SHA512

    48ab79043123dd26307c9309e3cc075288b8b7558d94c6009689b9ae99d52dc948dfe96676dc3063a0c3604b4e26291e1bf030034f3696bdac7ef8e07cf75287

  • SSDEEP

    1536:XOCh+Mk9x6LA4temDQi8qjXuUwEhnjoPwFBRTjAVKITK9roWwpOSFOWgGeTfFa:+Ch5ZMmDQPU5joPwFBRTEMiO3SFuGeo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00e1d79f7d0d75b81a634b2391fffc47.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1220

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          514c28b7afd59fed20c24551273a6c3e

          SHA1

          80a310706050e988da3a74c676f10428c3d6c120

          SHA256

          c18d8300cbd909d5135f050c7ca670ec29f1e957cd45c4ea2d3d28d3616136ae

          SHA512

          ca3d46258bb9a0dede9d29a752b379634cb012a6768a12d0eef32d1c7550378c523075b110193d51996957aee8485699a2d25e9438330167d2f71097030b4b7f