Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 02:47

General

  • Target

    0c2161bf8df8afaf7ee4f3372a6d388a.pdf

  • Size

    85KB

  • MD5

    0c2161bf8df8afaf7ee4f3372a6d388a

  • SHA1

    2eec721659da9d965d0748348d0144b5f08ae3bd

  • SHA256

    f9284a8c88a1b1ea30ee3c6f6ba9c4b2378ac54eae7ba6bd61e8ae9a41c57bf0

  • SHA512

    52ba26d98fe9395de7c0040c7dac9fb7cbb02397c9406b043f0fa9f359ea67f6820e8f3c4b3ebc3c945f03e17ef7a0317d27f69e7ee219ccbc5b69af7adc8fe5

  • SSDEEP

    1536:n6pwwzGYttahdpQOpXhS5rNBtZXsPX5vwQJasXZ00Lnu2r6dLrVEW832RB5ecS9b:ZwxtoVhS9BZXswQRXZfBradZ53S2G+HK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c2161bf8df8afaf7ee4f3372a6d388a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3064

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bd893b0e2f031ff6df528c924cac2343

          SHA1

          9a6bbf506016a15310edacc07292ffb044bce1c7

          SHA256

          16a887809faa234fe99c3473e1c0a4e6c70e28623e8add5e06fb30670ed0e8d5

          SHA512

          9bdff4cd05e782a60e18ba266c83efbef2f614b16b4b071df451e7ae343644c9f58e9fdba8af17549aff029ef3491e21d4225d7b4ef31222d79423576992fc7d