Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 03:15

General

  • Target

    0caabd7d73f1282c5fdcfbc14b4b93fd.pdf

  • Size

    81KB

  • MD5

    0caabd7d73f1282c5fdcfbc14b4b93fd

  • SHA1

    9a6c37e589de1187cda9c28f8748cd27fc4831be

  • SHA256

    87bfc09adc1ff387f5ff5f696df4b24b74228473ccc60e6534f38a4a2527b01f

  • SHA512

    9490b78d052243909110759c3205074a893fb29e765981ae94b36d715f2c8612cfb1ad962ac042470299b97a863fb5700aeea78908ac21c23824d547a99d0273

  • SSDEEP

    1536:njwFaXqWgQ8nXPAdDA9RK1m+mI90FFyKKuDQHPc3bS+VjgFa4mgauqMa:jEYqWKnXIFAHEmZIQQ6bS+VB4mxuy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0caabd7d73f1282c5fdcfbc14b4b93fd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    21448d0269c1cc25c1fdf79548cb5728

    SHA1

    39de108e70e889f66544439365ed39a3c26bf25c

    SHA256

    c10ffab19f4b40e5b3bf25683e6b96efef20927fc6aee6e02593f03e6b8f837d

    SHA512

    7f8be5fca1a19272250e83595e5b6668dcc7f6de2e3a153be4844311ffd311ebeed259a1066b88bbc2f8391ffb9c082ab1632718e3f4a397e8cef7350f0a0772