Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 06:15

General

  • Target

    10d57a6cd86ec627044f8493cc4321d8.pdf

  • Size

    78KB

  • MD5

    10d57a6cd86ec627044f8493cc4321d8

  • SHA1

    c3e3b2194a4493e5f34dd6a8e2e8adff8b177b25

  • SHA256

    4d1d78b4fafb133005e9a5e0f30ee86635d3e33532050c9d78ab81611db5fb30

  • SHA512

    f64407b5be2e7865dd05145ac72e536dbb595bbd3192a57fc49d0692724089b235148c743d1f98c9b008925b32e1d35ee4fa52a09de650e4a933a3c17dcbb42b

  • SSDEEP

    1536:mHQXK6OqVDoz7urJQEnkaIL7dusrl2gBOg54iHSFZivnt6DbBxB2oO:RXK6tBopEPIL7d5rMgBOZi8Mvt6DbBja

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10d57a6cd86ec627044f8493cc4321d8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ada254a1de2d8d44e2bae32235530ba3

    SHA1

    6f11483c96bbe81919b6a9194d2451b0d3dd0cc3

    SHA256

    62f5baa5d5a646b961c99f0ce3ebf35c5a080fe4205b3cde4333c0aff414812e

    SHA512

    812d16703ee7b538d514cdd1eefd5bd572bd0f6d897cf7a8c55eb1de12e52358b9d9371afc0e7e3989849aa8cdc10220fd240e3ec4014809a1847a0d1d717b1b