Analysis

  • max time kernel
    122s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 04:50

General

  • Target

    0f15294ba95b70603e56f2a3c657ac7d.pdf

  • Size

    78KB

  • MD5

    0f15294ba95b70603e56f2a3c657ac7d

  • SHA1

    7f6aca1ce333b405acd8a786e09704749b14254b

  • SHA256

    e5e97ba919e3fd4350b98063b844022ca5a387da76a91d64c5ea165f110490c2

  • SHA512

    3dfd6a688c11fa48330eb9b24b3d25129b6bed66d09a8d75c07e2025cd95d9d1cdec4500deec37f2bbf8987647541a81ea0491449a923bd62a48991421520cee

  • SSDEEP

    1536:cX0+iYjy5TOTTJEAxrQE2swfZK/kGPGEgAuJISEi8Ca0acD2voJSnFnlL9P:ux2huTJlmE2VokIFBVcHD2wJSnRn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0f15294ba95b70603e56f2a3c657ac7d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c009a2b80bf6ec1611b5bb8512c8b70a

    SHA1

    9e5e33c596c95c14a5d609cdaaeedb71283a30f3

    SHA256

    e43ca68ca3f8c389b14308d5180d5dff52c6767cbc432230be03679ac4dcdf4d

    SHA512

    9fdb1e5d2bbe1e9ee8724f481ad973bb1f1600ef66aab1e0071b81ac93a0ec1afebd4f44e3044ddfdf46f8e6c1a673d097408a60b9c8918ec172a6afbf1bd892