Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 03:11

General

  • Target

    0c9783cdbee32e081b9d2f4d43fc5533.pdf

  • Size

    93KB

  • MD5

    0c9783cdbee32e081b9d2f4d43fc5533

  • SHA1

    e81be21309dfeaa7c041e6990167fb5f1f1dc286

  • SHA256

    77946521044d9110345e5805533264bc574251eddc179f5f0e82ea5d7b66d311

  • SHA512

    e4fdbd41c7bed5363999eff140c49d8f8c072df69ebfb4b33214503fbab0484be571d991ea42f7b7d742788df43c5856ebf976b844b6817c9e5aff27b2b2b323

  • SSDEEP

    1536:A3PJqsUlB6tXO+E0suoF8OLlrUAgCuFMpJaZEeciMeH67056PCecWcErRU6kehjO:yTUlM+qOhrUAgCTpJaTnMyrGRXhK+q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c9783cdbee32e081b9d2f4d43fc5533.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7098cefed53b2638c83c6df3e22ebdc6

    SHA1

    6699a009b96bfed84fc75a0905ce390cf7a1695f

    SHA256

    c02b581ea091cdaeda9fe58d41a74a32f8ed2a737f6f951e1562edab05fe902e

    SHA512

    bf72ee812b91aeb9d39e45dfb07c7a9ea57f041d71a524ae98463628129dee4bd8ed2a6a322b5bd0ef8bfaef3833bdda68b35db07c74c05cb9ba640477cb01fe