Analysis

  • max time kernel
    122s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 20:31

General

  • Target

    03366808f40d6f497acf0c649431470d.pdf

  • Size

    72KB

  • MD5

    03366808f40d6f497acf0c649431470d

  • SHA1

    d82f372a6819ab51a41f95007a28af681ab8deb8

  • SHA256

    e7dda3cbaa77786a2c1ee3aa0e09e8f422a3ef2d5e831c9f765e338b509a0a91

  • SHA512

    cf4b58c930544cf920a31a279229c3e841872146ab53242cba95b3b11eabeab5dbbfd3e22429af4ba74d97c22505c3b777406a4051caf8db2161b6557370e685

  • SSDEEP

    1536:kZIh953WklZM4X5ODNfAeBAKia5mGCoT5p7NWEQbs4DkWepOiIWs:l32kODdAe6ajCoT77ZQbs4D5iM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03366808f40d6f497acf0c649431470d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2c57bedb35b66616b6188db3218cd9b8

    SHA1

    7777fde69bba5aa34c8cce5b48cbb7c5cc71f2c6

    SHA256

    a2a3f81ecc6c5e7290f691480d1a504264876661593a2c4ec32d29499c744829

    SHA512

    7e37bdfd0cab3517c9f94630025482eef0c3fedc6ba32f2dd2eb4b9b9706a6eb00204d23a4525f531d9bf1f2056df181e389217c3797fd734f4dd389cb617fa1