Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 05:19

General

  • Target

    0fd58303b09d79a8d6b0d65ad2f4936c.pdf

  • Size

    87KB

  • MD5

    0fd58303b09d79a8d6b0d65ad2f4936c

  • SHA1

    4d19df1c9494d16374b40c221fbdaccf15590e56

  • SHA256

    7afad5bbc4291fe9983c320681cb39a4fac2295f190dc0982d07562b772218f6

  • SHA512

    6d28bd40604da133d28b6ffcb8f4062584378ea419fe8895c978322e9e7a9e8bdb8600c213411918d7ca36d76a929a6458f4a6482627e948cf5f1bf642096821

  • SSDEEP

    1536:tpZ518GwbVjoD1xIgXBD9dS92Jf8Ld3sJ6etf7iRD4l9dWxmdZFU+UmqW8pO+QcU:HZ57w9AIgx9dS9e8GteRD4baeA+UmV+K

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0fd58303b09d79a8d6b0d65ad2f4936c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c8772268180c17ac4efbf23205d2de3c

    SHA1

    774885ae8903107fae02ff35ad6bb395fdee9fed

    SHA256

    4596efb4dc750b518f863409d8db351a0f351f9c19c7252ec54db65dfc014df4

    SHA512

    8aca0f609fbca546c4b563306b9e4b65b1d61bf52f9cdd29fd80c6ec6312d229096a34894aaa5b6326537405ea398dcda0047f79f7e44625587fca32d8a3fcb2