Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 20:50

General

  • Target

    03a6ff91fca590adb81081f84a704b3c.pdf

  • Size

    70KB

  • MD5

    03a6ff91fca590adb81081f84a704b3c

  • SHA1

    b338bfc829e4bd888e7d8599e6797639fc2672b0

  • SHA256

    55ba9dddbdb4fb58f19daafc0097de5e62e6f37fd436607c8e84f8a7805bc5f5

  • SHA512

    ae8aa7e59c5fdcff169c48c2603b1bc6b1285f8761d777c3ae496353ebec9dc31bb09555950cc202ae67d5f732902a572eee7e721394a9a2e5f5cb276e0e2e78

  • SSDEEP

    1536:RM+LfPQUeT1oqhGTu/C6RX8ehaemUAYNXG1nmAO7oJ2S1Mt21vltxfw/aP:tPcWqhZCAtRInndO7oMSStuhwu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03a6ff91fca590adb81081f84a704b3c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1792

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          58f9342a3df194678d0dd6dd7da41ec8

          SHA1

          d6151bf3d06bd118cd0bcce869e67f2363f5a85a

          SHA256

          13594be555fc0b7a20ce24e6319ce71dfd31d63b664e149249861dbd10601d10

          SHA512

          38c1f334ac574f1bbb2715de9dfbb4141e85694a6fb97f6c2b1351d1aec2b42df42d1016e06881cfde6fac115f7170a4fa310d6a6538e406afd03b7ef5650af7