Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 19:12

General

  • Target

    015c7ec1fb3222dee838a443fb24273c.pdf

  • Size

    34KB

  • MD5

    015c7ec1fb3222dee838a443fb24273c

  • SHA1

    0661e23763f84c93e0e99f5d7247b4b9aee28cd6

  • SHA256

    6dc74667be396af3232b6b1567d42b9ac331c4c0323939bb1b5b91df8544feec

  • SHA512

    b20a42bf6b8e9d87a2026397e11afdcf527d0fe4517f497bb962000431996c7fafc7a9926e6845a75d0fbc725b0182646da704c53a1bf738fcf8c0485d4d72b6

  • SSDEEP

    768:XVDisjfJ2q59gxzPt8SiPbtt5cLxQmUsC8MpYIpFy0xmvyooQYVicFjFTQR6AOxU:XVDisjfEq59ozPt5iTtTcLxQmM86YICx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\015c7ec1fb3222dee838a443fb24273c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c8f688a1f6acb22c74140ed19c33cc01

    SHA1

    b11878e97f325eaf91a53e4b2f84e4087f248824

    SHA256

    1b4ec0f46d25ba05c1ef78872579ad0e2aea9451240855892b5cbd51d9c4f485

    SHA512

    28f353e05978dd80b9de9fed522d94a3c40895f8223b4d1ae36e983b2e5c3df74524c5acb62c2b190e9bdf17139dca042bcc7c28eca2baf7caa62e9fbac52fba