Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:17

General

  • Target

    0e2eeee5ab16f05682eafaeb47d91a1b.pdf

  • Size

    84KB

  • MD5

    0e2eeee5ab16f05682eafaeb47d91a1b

  • SHA1

    0c247a4d967f93a31adcde10b7d36b3c3b7d7168

  • SHA256

    f494c87c1a09a03b89715cd95dc65b14b8389a1e370e53978ca62886bb633321

  • SHA512

    e044541511c05c6e7dd0dabfd528d9787418cf902edfe26123f9ab6528215af5f3b583d4aed4dd744cfd44abfa8671fad41d29ee5dd7220a1b0643860e6ce794

  • SSDEEP

    1536:5/3hHxRlhgxszdCPrIEBk9teStvd2H/8HkdWtDki/WxApOGfdUHYAB:FbhZzkPrf+teUvsgg3GfdUHR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e2eeee5ab16f05682eafaeb47d91a1b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2536

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4192680e732c926e4067135394863e15

          SHA1

          0ffb2008b732096eecba79a3c6c4e2cacdcf16cc

          SHA256

          acb0bb222a990cb2d85ac5fd89b77ea0e2d5be658d61114c1fcf787569197db6

          SHA512

          bb729b7cf2ae51a834c32cfe791133b4e2880469471ba7d5d297bcf32316b2cf4cbc62b7906e22505b3c3bfad8bd68b8b6ff67d336ad2f1ea27b52137e6cdaa3