Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:10

General

  • Target

    0fa8569a0fb1c72fd4d1c65ae9b0d0ce.pdf

  • Size

    75KB

  • MD5

    0fa8569a0fb1c72fd4d1c65ae9b0d0ce

  • SHA1

    7ad6a0e0e2de77015f507b5ab0bd31743323817e

  • SHA256

    ed10db66d9d932ef73086ffd0c149bc49e25a728171d4d711f6d36a9d7c2d84b

  • SHA512

    7c76e530e25f67b2fc6637a0ce4439c96bca4357d524ed4d949bec1133adda96872d9c35f22f8876dd8921ac166d65548a15c832d480e67b58c04af9c6e41638

  • SSDEEP

    1536:64ZslUXD3JVdj0DykTRDeO6glU1HiRuUKF1UiC+viw+vu6FUpauuYyXg5aOl7O0q:HZslUz3JVp0DyA6OSHiPK/FCAimeuau2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0fa8569a0fb1c72fd4d1c65ae9b0d0ce.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    529cbeea6789a7ba11ce7351844bd264

    SHA1

    081b9f99f65ea44089bb6f205024cba731df3132

    SHA256

    b6f418b0defa38bfca72273a328e1e172787e0c255a580e20b23ef3fd3635c1f

    SHA512

    19b1352b874140e1c099266503cc10ea57a94f20182f04597903345584549196fc32defa74910726d738f8b56153c4c3a98ee66ba653b6d2e517cc6f2acccb66