Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 20:26

General

  • Target

    030ee9620d449a17f5f2bca9aaa33d5c.pdf

  • Size

    77KB

  • MD5

    030ee9620d449a17f5f2bca9aaa33d5c

  • SHA1

    6e46ba0e4fa563ef1d4134447d98dc791d744433

  • SHA256

    5c3b9032b91dc0499289196403a09633bd381eba09ac374e366326de0b5fe93f

  • SHA512

    49e49f60460c8bdd74d0299e12338cb3e80ddb45e9a6695c7ae84c1e7e92f538f06e3d6b7d777a3357069fddd0eba1cfbe6e294ccb09137ca7fbb3773434a5a5

  • SSDEEP

    1536:4qEUSVApMnrAO6E5fK6aMrDbR2qquPaRyWYWb27E1OgA5b:GUSVrnrAAYtJhuP4db2aOgO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\030ee9620d449a17f5f2bca9aaa33d5c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          b06aa68c161fff456ef5896f72850a18

          SHA1

          2f682f7b6625e4aad0c66cd2dfbde91af34a1cc7

          SHA256

          92a16c72ff9419205ff467111ce38e6ad440ab32c348be63fc7eb9d8c2673e3b

          SHA512

          2522e7b9db011aeaa4afe97dd43020d116923868a776da80e10e1a2646569b6214359da307c35977416bf60bad12b1e70dcd762b4faf3e07106caeb1c8dbf049