Analysis

  • max time kernel
    151s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12-10-2023 10:42

General

  • Target

    6a9d36bfb81af3947eaf096f82f90524bea5d103dc0a69ba831e0fae7d65c51d.pdf

  • Size

    224KB

  • MD5

    e05d70a96aeefe3d4bd804dd8f654fc3

  • SHA1

    0f4588070f1214a95e7688f06729f48588da1d30

  • SHA256

    6a9d36bfb81af3947eaf096f82f90524bea5d103dc0a69ba831e0fae7d65c51d

  • SHA512

    5b2109db4e3b37ad52a3134c91a8ae380e18dab172b2bfe9e4e253c59ca0ad00290d8822904a55a8fa71999169dc8032d97588fed56f3fe7863de903f4baff3d

  • SSDEEP

    3072:dr30jIkU95DCemoQSX/IGMZU6+TstoIoSzTEKbJl4zRSMQIs60d:xKUTJdJAZZrtoHSYSMQF60d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6a9d36bfb81af3947eaf096f82f90524bea5d103dc0a69ba831e0fae7d65c51d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    73a5f304e39e253b512e5bfd28215ade

    SHA1

    89b6c14f5037ca90abf98ec512611d8845a49145

    SHA256

    0324e907afa74e21b6296e3f27b023f05140f19bfe41677bf392854ba45411e3

    SHA512

    c6c3b7405c10192628f277a7b88a2971e7161fe23c326e157e2d82bdcd02cf3e4b0acd4c28d24893eb4a4dfe69e0792b966778db7ef2d9d2f36678c7be098954