Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:03

General

  • Target

    0dc891bfaf8aba012c6f791eb26f929b.pdf

  • Size

    89KB

  • MD5

    0dc891bfaf8aba012c6f791eb26f929b

  • SHA1

    702b8ae7c2080b9507bd13ef81b172f0da9d287e

  • SHA256

    64221c1f7a273e7044f102532a8a6e0f988330b01d33028806181f46a68ecbbb

  • SHA512

    c2f962cfac1c39d3522877a228fb3838e07dff143d794ee4b553b209d0b9ba2095491231ff8f716167ba57d9f8705f88525ae993ba8532e11338de53a7badafd

  • SSDEEP

    1536:PvaEo7/ZJCwBUNcRt8ZLuir5c0bMyyAThX6HWALWdXxvAFzuHWOpOaZPvXYKicJ1:qT/Z8AUNcIJZbHMrYJ6qYaZPvXf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0dc891bfaf8aba012c6f791eb26f929b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2856

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          93a674d8aa28ea1b9e468c955e3f68aa

          SHA1

          df11d92a0e19ca2d9ce9369828ae4b0d270760a3

          SHA256

          fdb294773dfb91fab1d533a0cdbc507d4b1ae04f73b5cb3a674cc8e71e1d0dbb

          SHA512

          25f8b7fc21c42985ff0f07a9acabc1b74f75a1ec6e4506d54fec9a4a4495b167b4e3a2059b9fec13b949ca6c40bf1d5fe1b3f69c020747e7d828ffd33e2b7735