Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 03:47

General

  • Target

    0d69bd1ea5c1f7be124972d08c5d2c5c.pdf

  • Size

    43KB

  • MD5

    0d69bd1ea5c1f7be124972d08c5d2c5c

  • SHA1

    8bfb1f7fafaa95ab4dced3b4292dacdaafe49377

  • SHA256

    9252831b9fc2b4b602316f25000d212384811b1d194eeda73cca992cbd9dc7a1

  • SHA512

    49ed519092cceef01f87c416939b68e401dd7608ca116e77b8da70014f9f1d7d75107bf098b284e40639a91dbe1ee6f4361c0e42c3eddf858992b74491e23170

  • SSDEEP

    768:RZz2vw/CY+G9eFOwVqS+1fntp8GcNlpfu+uYQHLtmBC8yfIK38v1:RZWP9VqHlp8Gcz1uO6IoM1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d69bd1ea5c1f7be124972d08c5d2c5c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fc50e912c49cdce1d346ce7d8295fb1a

    SHA1

    1f62e5090db0fdeb20c430500c5e1b67d1711e47

    SHA256

    33b667306c57a7ccfdaac07ddcc2cc75eceafcecdf60335340bcb8d26aa8e352

    SHA512

    308bfa14c0a2b88ec6ed99b004cced8b98fd43c97a8f60335567455d9ddc3ad81d0f0fdf682fcceb73e569851042b91ef0ce22f0ca4d7c7ca4d58e4aff8181a3