Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 18:57

General

  • Target

    010dfcf0e5042075b2184e83ffe57d1b.pdf

  • Size

    75KB

  • MD5

    010dfcf0e5042075b2184e83ffe57d1b

  • SHA1

    3cf4cc53229502e3a9250969c196ff22acc1c818

  • SHA256

    ba5eee52ad6d15a41f7efa53b78a0f5bd7948c0ca41dbbc0a67fd0051a46983d

  • SHA512

    832b9d42c9ffd0f246c90e813bf300a2d223b7ca3c46d8b9f7ba63a555124938dd68e47c1bc3b06690d71ae71defe4609c4de48a0774b8a198f7efb8c30d9619

  • SSDEEP

    1536:m4X0Np+t9hMKX0o8oLs35V4gzfGpe2LnzqRogZGhteG7bLBTNA:dX0Np+t9pY5Kg6tzqRogkbekBG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\010dfcf0e5042075b2184e83ffe57d1b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6cae195ea886de0e1aa05e37704cfdbf

          SHA1

          9630fec0a9cc935fde678e55fd94591c538d4a6d

          SHA256

          3c663db0916800f64ff7132bd3be200155aa99954d2b811598479571e8d3891b

          SHA512

          2bdf55d2ce93c9a7c7af80f3f8d4a5657463677b1e1182c1d237150b18efa7649c2c942b240c23aa2455ddeadbcb8994a27ab98ff0a69804cab4d518305295ed