Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 20:42

General

  • Target

    03758472aaf0dafe4aeeb9fa2a3708b4.pdf

  • Size

    34KB

  • MD5

    03758472aaf0dafe4aeeb9fa2a3708b4

  • SHA1

    98f887187981c7adbca092d5318b6d5b9794908c

  • SHA256

    5dbd33b00ef894bcc0bd155e55c83e16598c67f02c0dcbf0df04f3656c36504c

  • SHA512

    38d769d513d50711e79cdb99402d7fe5e74dec27a445f4d0b7f01931b73928456d86559894c22400858be24e88bdb5ae098ebf410e7bacccd37400e32f3f50fc

  • SSDEEP

    768:ax6yuzw3Q001OYelJqbws32lzqF3oiMODk7LralXqn:KuwS1O0wu2lzqF3o9ODk7PCqn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03758472aaf0dafe4aeeb9fa2a3708b4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1672

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          aaaa46e44d8b74ce665d7b5dff6e0457

          SHA1

          7c0c0765d97a0d200ebc6c4b7be4269b0cab8043

          SHA256

          0572f1d40a3f8ad37c89b1f871d7ad71e33637d6c7637a4a6f40ce2b4f7cecfb

          SHA512

          c4b29e574299eae168aae3303eda994336bd3fc4288e0703812a8647157106b0cf65423dd933c5806731f0eeb747a4e14ac87b67d23d18b634497ca358d45baf