Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 06:07

General

  • Target

    10afa3b113e6f0840fc22f637e72c3a3.pdf

  • Size

    104KB

  • MD5

    10afa3b113e6f0840fc22f637e72c3a3

  • SHA1

    9f857a63b2e80ceb9d339a06c12830e6c604f18f

  • SHA256

    c4930f0762d6f179341e77434718520703a1ee585feeb6e98e01c8c4750b23b8

  • SHA512

    1d5145ae2d40925280fe780523eedf7e271d5b829698be4f11739df9f1035c2d79faa15f312ba3be8701fdf0ab4a6c3cff81d94e75a28659f17b3c1f04b26773

  • SSDEEP

    1536:E+43s5dhLoHOxjn1ZaxXYu4nsc8SplCtr3NysyFDzSmKoZGFW5QW7w4r3woYPfy0:+3YHCG1ZuT+SL3CDjlGZQ34ft7t

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10afa3b113e6f0840fc22f637e72c3a3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2404

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f1a0c9c6074ba60e7fe745ac32efa6b5

          SHA1

          6bf767e82f918e454045fff89747586b6973d388

          SHA256

          f9203e71f4c6945f8b72c625ec3f61569d8d4b85cf37b91b82dfed2c2c1bd19f

          SHA512

          bd1defb9a901fb38eb5a7be8edb4fe0ffa8b74cb816267a4ddc51600864ca9185b00d1e81c9822e498b4411566d8e1b6567ac6da492b4e9b335d88d8aafae90e