Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:50

General

  • Target

    0f0f75f9239d77ab3157efdb361fa3ee.pdf

  • Size

    53KB

  • MD5

    0f0f75f9239d77ab3157efdb361fa3ee

  • SHA1

    1aa9df006d9a080440ce50a77bbfc6cadc166810

  • SHA256

    486ef2c1b6e1a43a5a6247dc3325ca21b285523f4ce2d12f6fa20f04386b3142

  • SHA512

    5855c2acf6499e9d95875ddee58c2d1be8b86338a0f310152356432967f58a2a4090232890072f6d793b16c85564d77f69466af0fa60301bbc331e01eac79bf7

  • SSDEEP

    768:ZG2Dz8ej9qdF1RzfwNF8MWq1VIUumIIJHKImAsMjNv+HqdZzIVCssi3/09zFucF8:ZtFehY8MWqP0aLgVCsT/0ecFgV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0f0f75f9239d77ab3157efdb361fa3ee.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5e0b0c3a361d572eaae9889142f5afe0

    SHA1

    e9a97fb0798b9507def2ed3d67736d42f7697da4

    SHA256

    735ac3c1abd8410e431d33486c3d1778e08884f191aa0aa05d992b3fd6540be9

    SHA512

    03d6578ce61720125d8d737c53a6596bdd4cc10a626c662a12b03beee0703a9b65465a314b3beb1b3009aa847da8d90045b2514e6a63b035947dadcf0940dee3