Analysis

  • max time kernel
    144s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 02:29

General

  • Target

    0bb35e2db2db8f177016e89b6471de4a.pdf

  • Size

    82KB

  • MD5

    0bb35e2db2db8f177016e89b6471de4a

  • SHA1

    28c6655231c0104f3f42ae140da8720985dc4a66

  • SHA256

    81fad5839222e944f8f40a32d34389a07d88c15bf28ca373a224a2423749a411

  • SHA512

    79e2b6b4707435fe634b23a04b9b23f2c55ae185b3153ffe8f13f2d95d9fc3a1a12b0157ef10980d913cc020b5416846aa3d951d7cb84d077410a934b39460af

  • SSDEEP

    1536:7K0l/dTUNshCqkSEyUWXKXQyazukaOCKHKFP/5C2S83L8PtP5WepOWGshsWdKfIv:m2/dTUNoLUWaAyaqZOn2SJV+W/hsfs9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0bb35e2db2db8f177016e89b6471de4a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    962584225aaad7f32d3b4d4b91758bb0

    SHA1

    af22e7de821a7aa8cafe9483183a0fe38072e714

    SHA256

    62d27754dcc68afa60351476a89412069c9f040e7ec157b0ee1d5475231a358f

    SHA512

    60212ae054efdfe3c97115864fb729ac56f8f2bea486faa499a24d7d8bf5428f3498e0c400f76ab2e728bd2d86b20a61b2b5ff995990a77b0b62564250a1e792