Analysis

  • max time kernel
    118s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 02:23

General

  • Target

    0b878a43c79c1961f250b5728d3fc3c4.pdf

  • Size

    94KB

  • MD5

    0b878a43c79c1961f250b5728d3fc3c4

  • SHA1

    552f5edc55e84980db5ec345aa2fd24812703454

  • SHA256

    3393c74d91bccc442132b4ce4c33ea6ab53871a747129489f85232f32a89e28e

  • SHA512

    1a03fba81c609937552203f5e9c45d0741837572ded826154b5c8c900b1442f40887df65ef66cf5fa483cce7c8b3e72090ff4d7ac87fc7d309ac2ecdb4c59c71

  • SSDEEP

    1536:ScLPNtr3CAaULOaw3so2cJg2Le5cAdpvJJF55jnt62f3ZW3eFmV37BQuyFNeMuWW:H3CaOaqCzFrFf381QZeMQnP6ucA7z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0b878a43c79c1961f250b5728d3fc3c4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2448

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          766fe541fd394b481ef260633eec0d0f

          SHA1

          3d166478914fc5e3fb03d7b4f576930d3852fa33

          SHA256

          7c0cc6c698dfa2433950d2ca4ebcc5cc574f786aaa0bfa3a94b579a85e4cb870

          SHA512

          61fefb5e2658989c27ccfa0c11f6b5aaabc714216b21592fa96ce6cda6d4d9692f7e9a19d1fa5f770aa92b2f1a6e5cda0e35a0566ac1eaf10eee142faf0eb0b3