Analysis

  • max time kernel
    128s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 20:06

General

  • Target

    0290d4770d51ceb157a42eca5d2f1d53.pdf

  • Size

    88KB

  • MD5

    0290d4770d51ceb157a42eca5d2f1d53

  • SHA1

    e87c14cc5c59004bbe7f4a4873eefd4e725a8743

  • SHA256

    3038f07b0937e59edda464ecfe66604c94bf89f38947771e6ed61dddaf06dd2e

  • SHA512

    09e7c7d2d59b5dc9fbda9d3beb74bca778495a16e4245cb93411b2406d170f1ea1f023395df9adc2986f392ae02f9b58d682a46af29b2abb377f155ab296831b

  • SSDEEP

    1536:iwLGV4n/TJ+CGoR1HVnibDGvUAKchvBq2CxX5OTSsviw2WMpxUzVWHpOvQxED+EC:eYbJ+BoTVsDOKoYZ554Ssv7CpOzzvooW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0290d4770d51ceb157a42eca5d2f1d53.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    29e32e7f730b3371a8fc736e8ca06efe

    SHA1

    e7a8460f99ecd738d5b3f79ea1ac34b78fb55d95

    SHA256

    d504c4c5468627abfe8b3f6f187c6092a149e1cf62e0b28e65ce18d57bea9a1e

    SHA512

    0ae180b469d9dedacfa95119b8e35c1805e25c7230825ad63e1d6d4140c3167740e7ab1279c64798d71df14bd2e0b2f15caab8252bce39e3533ef01b1c13da79