Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:59

General

  • Target

    0f5875bf16e47885b89ae622328a604a.pdf

  • Size

    90KB

  • MD5

    0f5875bf16e47885b89ae622328a604a

  • SHA1

    7d3427f3d7a9f7fd252b88a1fad6acf27178ae4b

  • SHA256

    8e0101519a7a667f85a181a9c2b433af35037ce7dd37372ba700dc6c2093d5d5

  • SHA512

    14e92bc6794934e0eb8014f5f6fa5f4ab9c53a1fd744fc1042b6216da6c0ce5c04bfcbd0844a6ad8754837e44a4df70fa775b994146f2e837b632a86fb4c59fc

  • SSDEEP

    1536:8WTJaH1v5VHJUiPxMVQY4f5/zvbtTnx4KEftftWypOlLploWCXBl0kR9x+sqo:vqB5VHSsM54f5/bRNlEfp2lLDgBCkTJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0f5875bf16e47885b89ae622328a604a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2000

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          95bca18e4d646f50e7d7c2486143aa85

          SHA1

          23801cd14765b9fdcbce1b0d1d9a7188f934f367

          SHA256

          6c71349d908f043674db13c5cff08311ab86ec0ca6f65d3f3a3f04bdd9d5f7c8

          SHA512

          b96ce54b1bb65a5ce38e1f88dba31bcf1115ba95d1e6e26e2b61e1482271a7d87a7810a6821ace37e54cb5fba9f6739f0218b3c35ae88084c949fa6a28ac981d