Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:54

General

  • Target

    0f2b52d8d8915cf1451ff890143f34d2.pdf

  • Size

    73KB

  • MD5

    0f2b52d8d8915cf1451ff890143f34d2

  • SHA1

    29544f608e9c8991155d9005fb03d84298e92af2

  • SHA256

    a92748e1165e1b4c0820a2d12dce309140a2174f83c966df7ce39320701a3d2b

  • SHA512

    6de30f37c675aa06250f715ee237616554ff4b51f361736fa930df5312a88fd5c3da44503e60a56ace9bee469bb705001668b7dec7561cbb38ba897e54543ac3

  • SSDEEP

    1536:sakIHxnx4FSfzrdlPKWF8/FCM7X44z79ved0N/2td06KuIP8iQ8mY1myT82m8QgD:DkIHxx4FKzSWmN7l5m94PxmY1Tfm/gNN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0f2b52d8d8915cf1451ff890143f34d2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2108

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d946cd553fe808e9fc118019787c02bd

          SHA1

          bf7ee1a76783a2824d2390f73b549e70dc9a46ef

          SHA256

          f481810f446caefb27d0d2d4dde8228b827625346ae3504194c2f527910578cb

          SHA512

          0cf6f5bf85df17bff8fde25b1dcfd5cdd8a4f2160a09871960fe93ec43addbb4d7d16ffc614820d4421b4b6d53970fe907c378f5297762bd7aaab9e56a1181e2