Analysis

  • max time kernel
    122s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 01:54

General

  • Target

    0ac9e5ea5cd1c0cea66a8a4de9729342.pdf

  • Size

    77KB

  • MD5

    0ac9e5ea5cd1c0cea66a8a4de9729342

  • SHA1

    852fc6d6ac2a4afe0f3c71cd6ec2ea26e91c3d5b

  • SHA256

    381c304a6e8a47aa1477dc17eb30c4aea81706aca86e0d768a50d4a8780fe4a5

  • SHA512

    971f9acccde3da95e3fc3bc08c07f79c85f8b663a33835be295d126d77471947d8fff9dc069ea9ba38c1ca6c8204d60791a6aee86b1cc9800a372497d28f1bbf

  • SSDEEP

    1536:DPOPNkh4oXGb4RzmLxIN829MD9OOK5wP9yBWkNpOPaWoB+bRLFCeBSFezE4N+Tpw:DukKofbC4YcV5wPMKPio1Lqezr4y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ac9e5ea5cd1c0cea66a8a4de9729342.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0fbaf2770281d6b6356e0a2d2fd8efb9

          SHA1

          28d4fd301e7eed7267ccb96e1aaa9cca3e789b36

          SHA256

          75cef2794f25fb1a0d48777a68185f65de2df55e6dde2a8f81c6fd29460513d8

          SHA512

          ddd98b583e79f14ad4db2b34998fb3e44bace00fb92d1db6a4d09f10b45944730b52ce2039655389cd6cfc721c8412cb1d4a918fc99af15bd4967cbbd19df89b