Analysis

  • max time kernel
    121s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:04

General

  • Target

    0dd0e310287d12fc893e4b115d0f98cb.pdf

  • Size

    82KB

  • MD5

    0dd0e310287d12fc893e4b115d0f98cb

  • SHA1

    88892d7d19c15eb27dc8730d73068eee39efc52a

  • SHA256

    117b995c43ff26ce83d68e02ef14c6b762f79d1fc4bd03298d2d04cf801ced58

  • SHA512

    6b0947d60d450177fd99e21061122fea4d6df302918eb39263b9a6fbf23cbb50bd57844f29dc0a2f9f874fb493580f61d85e4116ef81ff4e582fdd5318dc56fb

  • SSDEEP

    1536:ahj38dxFgjvAlVKwrujiD1uclCzVCkGPJPTMEuTt/zYWtSvzMS8FpnBjHWQpOCLU:o3UxFgLAl0wruOocAzV/GPJPhuTt6gST

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0dd0e310287d12fc893e4b115d0f98cb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1604ecd3e99e67f180afeaeb2c0d91ac

          SHA1

          5a986b719e5231da34fd54281b0bce96260a2ed8

          SHA256

          6ce2eb8568d62abb79cd6dad149bf025906c39f4a4276f9396f72419224bdaff

          SHA512

          7cca608de5eb7bf6c96abc2c4699e79e0135a7505fe75ab0842b2eabc5fbb4f4721871cb20fea8226cc46dd942b95693db6e9c4c5614c72ee39e7aae8ab23e06