Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 01:30

General

  • Target

    0a1f1eeb5e317aa16d18afd3c4c98a28.pdf

  • Size

    32KB

  • MD5

    0a1f1eeb5e317aa16d18afd3c4c98a28

  • SHA1

    a7546625e1c673312a2a31a0daa8710b89523cb9

  • SHA256

    b7c62422eeb2a2d4a9dcd6f604baad8e772f107d5d87fa13cbe644e24fb40919

  • SHA512

    80a987c96e4cc0e488d0923c41ccef5e1c121895149cf089a35b102c02eecba6a147f5e1f1da2bdc52f789fdb08578d7001554a744e51eca3163d7e0791e0dd6

  • SSDEEP

    768:CKlmcMRR2gsfiKGJJy/9Sp/Kuci9I3Wf+Vn16f343O/B4TQc:zMLmx0yuVpw6g34BWQc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0a1f1eeb5e317aa16d18afd3c4c98a28.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    13c4abf98beddc6ef3e23cf162766e2d

    SHA1

    0f3ff6b52d89db9230b0262e12b231875f85c3c5

    SHA256

    b8eef502dd3d685d2291abb44e7b970a71556ec47332d85dc605c88af53e17e9

    SHA512

    5afe5b9a1e677cb749f38a9fb13cc3ed005314ad8f1b6924ee1fc5d2a45321303b68fdd15ab3287b5a47348012c2cbe520b820c0cb9b758adad10993f85756ef