Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 20:34

General

  • Target

    0348b73647edcade3ff3493bebd2de52.pdf

  • Size

    87KB

  • MD5

    0348b73647edcade3ff3493bebd2de52

  • SHA1

    d65bf7fd40543a967dd267d3dd76404c32a741e3

  • SHA256

    d0595d0296fc96f9cbaab73792a6b875eced869803811dea1621f1a61154d1b2

  • SHA512

    c4011d3a4bfd453908169832a3334394f69cbf52a75ebce41e7475b0d4551a967321fd569421ee2e29c12cafe04f8283d54efee333feba66723084100b29f9eb

  • SSDEEP

    1536:OP7n8qQStVYy10kKrmAYPRkAWYTscTwoGcmxG+l6aVubUhVWkGKWCpOVieqRC9n+:Q8q95fKr2eAWEsSwoGvGJIGHVibw8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0348b73647edcade3ff3493bebd2de52.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    02b764439e51470c3e412a17bdf69d26

    SHA1

    c1b64e80e1aaf91874a1c366292d47b9fbc352f3

    SHA256

    4a0278c059011a627c79c305adc5c5573338c6091747a8089358b12cdb630b97

    SHA512

    2f9da0a317bb187583029aef760456b26b23bac3f6291778e710cf1584988f65e767c1d32330566b1f78eb6675960348f780ca3548a3a3cfa0f50858ba2ed825