Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 06:19

General

  • Target

    10e6b7824af7ed112465bc02eda33939.pdf

  • Size

    45KB

  • MD5

    10e6b7824af7ed112465bc02eda33939

  • SHA1

    503955d6c08c8e937bcd7d37038dd52fde0615f7

  • SHA256

    748962a2f559d093e2cd82d702c3cf30772d78f52608e1db6d93ae79c7d6f55f

  • SHA512

    d4dc973c19438b054d730b9c61fbef99fc397177c4c83ee8c5b611f0d4ba54e42b7c29190c951f85f596a9d952c2c0a75054384b9713bbcb0eb0d987a1e607ed

  • SSDEEP

    768:tb9xfx6MJWduNzfLYXsoIc3ziQvojcTi0lJKkcSqCUMYE2SubQ/wHx5Q:PxZLosozDiVjcTi0lldpusYRG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10e6b7824af7ed112465bc02eda33939.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    eccb26735b6d0afcb7bf6526c6601732

    SHA1

    ab8babb947ff6811785e4f2b66e92c105fca2364

    SHA256

    f64553992d48c7df20573f3f15b954bf41d86a18bd3c1164b59bb7977cea9df0

    SHA512

    577d2acd00f80fd6253dac49400430d8cde3f4c33aea0a70c185e99bdb975fa2e6b98b1e7ea5dd950a45e5ea0c6efb210adb11d28d3315723ee91fe9a8c57d79