Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 01:38

General

  • Target

    0a561bb4fd558853719c154091f02f49.pdf

  • Size

    86KB

  • MD5

    0a561bb4fd558853719c154091f02f49

  • SHA1

    9f39c8c2a893f007e64cee23b085b5efbc5d4fc1

  • SHA256

    bec75b38d2ce632a5270b3abaea9c8353384edf238e1b58f2fd4e82957e2c022

  • SHA512

    3c3dc244fe4511248b5307ed01ad7cdd0a2055636039406214c2b38e13ca2cab9fafebe90b2400c8acac0fc501a387613a103bf74be3bb53c68b4bc069fe5fdc

  • SSDEEP

    1536:U1HXs+tPXqQF4bVZJlf5aGghbuwYLh52RR9gVBp7VATsIITKZMGocWHpOvul7F+e:4cYPtF4ZPlfcfhawYl5gfwBVVAT1Idqm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0a561bb4fd558853719c154091f02f49.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          5cff7d2f4d9a9315c7587e1069fdeb37

          SHA1

          32d70d4c2e00226fcc8922874438c131e0df04ba

          SHA256

          b2df8425d07c1e01a2f5a2fb130a82ba59c843ae636aeddd166c61d205b78f03

          SHA512

          1917a6765551858a97778dff0cc4688c6ce07dc6319eb820467af91e62f9373da01d1d17c70e9d04696b7afa0a60930ddc99c909a05c2e45cc73fb02cd1792ea