Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:30

General

  • Target

    06d82d1e79f6d2983326367944b3dbb0.pdf

  • Size

    82KB

  • MD5

    06d82d1e79f6d2983326367944b3dbb0

  • SHA1

    9cb1b9832b847bca10ae537ee6a13347b77a99a9

  • SHA256

    91f88fffc492e44322ca03ac2a3b536a54a6da53dd937247e07bc41598bf3636

  • SHA512

    f586f06b0bd7c4f9a48a3a4a32a05703524e9a4282c38de62db9cfb9ccde4186227c1488be93c8287f0b118802aa02bc529ff605c3c1534218638ffcbe794ef5

  • SSDEEP

    1536:OBuBw202XEP8WVWyoX8/0Aftfd8Gtx7Lmh1WapOtQyV+tWfSWlpDK6egGjE:62ClVWyL0AlFdtxbtQZ+D3DNegZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06d82d1e79f6d2983326367944b3dbb0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2768

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          34dddbee9c0057a928154ccf9da95ca2

          SHA1

          a6d155799f5120be2b44d0ca504e20e9e9af3c77

          SHA256

          1d7c4ae7f79b71930aa5fbc370e0b54b673fcd6ee2473d6371e9a99e12f31c21

          SHA512

          4ed7356eb0786a34ec41ea1e1f3b272ea39f4fcc932402b0e227349fc955d2aabc2d6ecb7e1a238a01067ec3d31420cc199835d9f61fe7d3174e2c94e0083b6e