Analysis

  • max time kernel
    122s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:10

General

  • Target

    0dfc7c62e24152173e02474cbe92f922.pdf

  • Size

    130KB

  • MD5

    0dfc7c62e24152173e02474cbe92f922

  • SHA1

    de7eade8287f0a58dad1c454529924e6bec2162c

  • SHA256

    f62dc3eccf4358efc3bdbfc953511af8dc854b219850edf177beed851413c8f0

  • SHA512

    c1ab1427ec43fbbb4d61a6583e66926de92bae49e024052a85b82b0369ba6a167334b83dd5e73915cc86a0c74282733a816e23681e7952e86d2caa9106d6887b

  • SSDEEP

    3072:WkoO3jTqRML31DrndwobTg3odPQm4HnG5Gteg+ymHgyr6mFhVO67K:JoOPxaoLMndAgB4F4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0dfc7c62e24152173e02474cbe92f922.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b924eb2486551896d8a73d70ba2cc99b

    SHA1

    56e9304099c42eaeb3670bb482c7503dca392b6a

    SHA256

    5e9268a95acf6139d2ff7c09ae3a3d2603169c512d8917b1fbbe0d7f91833086

    SHA512

    4ca4566ab137cec4a7934abef78fc0f4ba05da7feb0f3a770cb4cfaa9b6fb9a3e5f99a122e1fee0c3f36ae3721371172804d49d87bd0721abb4ebf56f9e7aa07