Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:24

General

  • Target

    0feef30f1ee6103e6b195163f089e65d.pdf

  • Size

    94KB

  • MD5

    0feef30f1ee6103e6b195163f089e65d

  • SHA1

    70bf077c6c0d8ac3c9432156be0c34fdbc4b5b47

  • SHA256

    d2fe9507ef4a25028a745fb0b67275632085fb87d2fbcff24cf9f30dd652cb38

  • SHA512

    2473986817c74974bf580655f9b1c66bfd6289e6e32e6b5b7e80e6bda3e58ed09a5fd1a55e7fe2be83de1fa52de96bdcf1f74746f84b68fd8d7efaf262c110f4

  • SSDEEP

    1536:sDTdjl5efScVv6pK1evLoFXkcluXn2Udq2U7mrRgOy9AKIP6qjQfM8UpohmKL59b:o75efapK1UWuJUajEAKIP6qjX3gVDaEv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0feef30f1ee6103e6b195163f089e65d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1448

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1ea197353852c0de665a1073f753f307

          SHA1

          cd5b16e617ca77755f9f29c089e4e7f0d48cab8c

          SHA256

          e166ceff11921dc4d030d5e96885c9de95ec64d4dd84ff97a15fa89552055271

          SHA512

          24fc988406365665de318753dc53920fd199d01de2d6af92510dda50c109347b498b4413a4a6013e2adea9738b5ab4b84591c1f00ea8c19eea0d0796e1b9dcc1