Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 06:05

General

  • Target

    10a7e513327ba41b3d642ba7ef8af99f.pdf

  • Size

    35KB

  • MD5

    10a7e513327ba41b3d642ba7ef8af99f

  • SHA1

    fd037dabc7ba089f2e9aad1fae3c1073ddd025d9

  • SHA256

    740bd011031bfa163808cb7746557f5107ad2e6590edc323b2163e94a5e35e55

  • SHA512

    3770f875af5572e1f0ee213999ea4b92e9f4c13790819a6d4b492f0642bb236c0688c2139ebe62215acbe4624d09cafd1e8d20f58dbd6acbf50e36fbd4e8b697

  • SSDEEP

    768:4YXE6Ior7lVirwPAV6LazqbnUSzq8IaCWvOhwKTP5Ql3jbrF5pva:4YXEpIP1l+8N1mhbQl33rF59a

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10a7e513327ba41b3d642ba7ef8af99f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7db8c90956fc7a3d4659018e6b4fee67

    SHA1

    31981b01b87e64d8eb27724e48943590f19bd4ac

    SHA256

    17a2275c94765871979716b0a1f9cd32a8c02adf8c0eb0248998719276109050

    SHA512

    0968f6a57fdfff93b794786957a442a3e5df9b4f7c0558ecfad3cff7c442e79d3477c48a30aca1be71914b70293888740602b5ae0c0c8d79acad9a2be4216822