Analysis

  • max time kernel
    122s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 20:39

General

  • Target

    0364f3da2d2983c9d1cfb76a304f043c.pdf

  • Size

    87KB

  • MD5

    0364f3da2d2983c9d1cfb76a304f043c

  • SHA1

    90ddc9642dd120910ed950d313886deb776172ef

  • SHA256

    c184861e8975f1611e098e26c4791d829e771b4296b6701bcbc85f0f23430bd8

  • SHA512

    3233bac1160faa73f5079da7643da25c7980f0fb05dcf081d000c795380f733ada01d79fd955c768540dfd59d14b5e5facf089724c0506103edc27184d269d59

  • SSDEEP

    1536:bRlhOZ8amHR3YGURu6rp5N1CmVT/xX93+ZwdWXxDLWPyGyhpDWOpOaZB3Q0cGxx0:dA8LHRo1FVvwa3g9KPyG8UaZi0Df0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0364f3da2d2983c9d1cfb76a304f043c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    340e5990c0fd0fce2b2297004d60d8d4

    SHA1

    89d535de296c6084b1c416d340820f2fa5e2bfb7

    SHA256

    fb7eda89d70c3e6427ae2c7f5f9b21d93490bf28bbb8c3e87de3a1bf2ba5fa1b

    SHA512

    939cb54adad418fa681949255f7e2fc38962cf5148b8231b211b92b29096cec94098103a5a24279a1558eb3abb3a8e155f3a9fce8f564fbab96271ea8234de61