Analysis

  • max time kernel
    120s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 22:03

General

  • Target

    b06e236bca2e54e20112556a3c65c260.pdf

  • Size

    70KB

  • MD5

    b06e236bca2e54e20112556a3c65c260

  • SHA1

    ab5656cd609e48079c87e549e4141b149d4dd2bf

  • SHA256

    0e509b39cdeb445dcdb83c01bfc40760a2e5ff0e317647dbd00f9d2c94e2734c

  • SHA512

    b2a55b91f8b232953d2b72f3fcfff3b611f7504c973fa006e1e3b080a3a430ce29d5db12ef7ed51a48da378d9725bf95cdb229eb8362670ae0e9c38bc45c4881

  • SSDEEP

    1536:FuzDV9puemD1QoVzI1uM49RsTKBxRLaBwptZW6pOu26W2qoLEmsJ:8zBVmDKuMkrLaB66u2GEP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b06e236bca2e54e20112556a3c65c260.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5e6d048d23c92264777961be446db147

    SHA1

    183eb40cd2cbcb5e5d9ffd78b744363cbe56cd98

    SHA256

    c38ac3ca2422fa3e8c19a05796f9e61a09cb8977a1f7067ce90311abaa2302ca

    SHA512

    6048a0325750ca5f8d39e40a974459ee6c37dcd3662b78f81b55ab59229c91c60900b35c323650e2df02c1e16be86e309a010de69836a94e2211a49e3836735a