Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 20:37

General

  • Target

    0357afaa2ff1a7b373d612695063304d.pdf

  • Size

    87KB

  • MD5

    0357afaa2ff1a7b373d612695063304d

  • SHA1

    7b10536e10c0b3faeb05807485e329da29fd4feb

  • SHA256

    efba6598588dbdfa99c75ef9503a341b887a0127f4b354b554c23632f86f1207

  • SHA512

    005139e943d26bdee149b90480b61fb504e2bb3964c26da642917acdce84d2c187a08be80dc709c08b2395185562bd2521324a4cb001e5897caf69433b936d57

  • SSDEEP

    1536:0hMzmpEEYopNlLf1N0qCTTmk1x2Z8GzMbLzA86KHSnjNRW6pOu26Wxc2pARkYWIN:sgMPD0qu6kHToMbc5Nyu2Lcln

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0357afaa2ff1a7b373d612695063304d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    65972b8298c688a6620c7792f5f24c12

    SHA1

    6ae3a9d50e690a18b0762e808edc17bc086ed70a

    SHA256

    6596f9187ac905ccc70c6f5e74d495b9e17ccc863e3d26fd14628c806ce2390d

    SHA512

    26b76dbe3c06cea7a04939d9f4235f544f36b82cb3b7022f1ba373a78f0a8ca05ae3fa6e5a5520a311c8060b6e63a53a894f7b84b62b458f86bf1021f2ab05e9