Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 06:14

General

  • Target

    10d0d375b8a04254452801bae3594e75.pdf

  • Size

    87KB

  • MD5

    10d0d375b8a04254452801bae3594e75

  • SHA1

    70fe01051a562c4a5b6748ea14b91805c971fdf8

  • SHA256

    659ac98d318f1d30dee45aa4c3706c93d9185fb5e90d46d8fb3666ea6e55fe6e

  • SHA512

    e06a9b262004860f9f8296c7311d77809a425661a98fb88c89c27b0bb47fdbc994d78152ce8573963e4778911b71184e75f9e260d439f65e44eb73d78510a93c

  • SSDEEP

    1536:B/Ex777Qfc3XcMxlEZ3hC0YwH7ntu7u6XlEWGpOKxFZn76GWd5EOR1n:2ZNtAZ3w0YEtOu6VJKxf762Or

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10d0d375b8a04254452801bae3594e75.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0b428a2396caef63ffa1dd7792e148fc

    SHA1

    26c5ee24257e80f4a0f116bb8020e241eef73e06

    SHA256

    15b75fa9004ec2acb7b9999bd0383000efdaefc8f63023c86d265557145f3234

    SHA512

    36bcca0e66b41cd92a3b25a90f71c4799df2f26380c4161d2d68133fcae28eeb69fda38727fc909c3f8c8351f722ece752cca16a075d5b24d8b67b5d662d0325