Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 01:29

General

  • Target

    0a1511a189fb5794f914f9511cc2f6f4.pdf

  • Size

    94KB

  • MD5

    0a1511a189fb5794f914f9511cc2f6f4

  • SHA1

    a68808f16dd46fbfdbc5fa1a259b7bcf706eceea

  • SHA256

    c2467494c6c7d104569e06ad848deaeecf112acfe618bf436e334366f8271678

  • SHA512

    00ad8272d13d068ba9481bef20c25e2bfe9443dabe8d58d3835cd937ff6f17b7a86c6cdc0733593fa990a1e5bab71bdd8d1c7d5a2d281448b74674b0174cb6ea

  • SSDEEP

    1536:IlAbkXmBuUdKcwq4lQBJNoXSIMM1emMW3OqBDvd5FIg7GWWrT8g6Gcn8gWspORS1:5Amow6KsXSILUpQ4rQg6G287R+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0a1511a189fb5794f914f9511cc2f6f4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2864

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          df7507545da79876fc4aacba8122d928

          SHA1

          ed8876e9c09b94c2ebe70ba551508547772e9558

          SHA256

          8a99f72fb297dd0687dbd46a48b4a701f651aec2458c3524fbfe7d80ce6bf74e

          SHA512

          7723ebd7023eb02085267d0aaacf19b800026e5b2e82d86816e16de7d13731ca7aadb45617eec2f8a7e2668cf3a8bcecdfe3c0a9fad3bc685b8785b230a4a5f0