Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 00:29

General

  • Target

    089c8b0f85fcee3ef630238c2e6e9b3b.pdf

  • Size

    99KB

  • MD5

    089c8b0f85fcee3ef630238c2e6e9b3b

  • SHA1

    6a0f778d7317e06851a52d153e1457e4c9f3015a

  • SHA256

    acbf48e9f28de68dd9e660e7605c62b23287ac9405ee322eca31a4837b6c4209

  • SHA512

    1db1ad62913a646e3bb8c1388b771fa16d70316a310cc0602187df678ad14668edd49bff7a0269c0f8669ae0c5ac1db547939b47b1ca45af146247448c8cae2d

  • SSDEEP

    1536:DxGnGiApUWpcFnQpe7fXPDtslTJWCrebDW8q5VWkNpOPvYQBw4yfWZMXkGsYGxUF:tE9QpsffD2dyPjry9sYGqXF0Q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\089c8b0f85fcee3ef630238c2e6e9b3b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0007c1bdf7eee936410479b28bc587ef

    SHA1

    4372f695c8b6e6afbaaff15a8f117115a7b96745

    SHA256

    e0a0063bb0eadc7bdee78d87d01d8ac69efd71eb13adb238f37d418946bb3463

    SHA512

    300b49b1a2371aca9a4a2195083946a3a1b811d5cb8b296cc25f02360306f95ddf8e30551323f4ceebd63a2fc8481a2ad5ca257097bf34f23f7f1e45d87ba0fc