Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:30

General

  • Target

    06a48230b14f14b06514bc47fe7a876d.pdf

  • Size

    85KB

  • MD5

    06a48230b14f14b06514bc47fe7a876d

  • SHA1

    9b1e2c34dbc5b2ec4059d74dc0a69d3d41a49671

  • SHA256

    74d315118469bfb5c46de4991369913ecc7249eb79b018860fa16a93812ebbc3

  • SHA512

    49b402b201e5bd99eb36245efc55a354a9d0f645c934fca4fdcc3af76047824a19060ade44423e5981ac2c2192b513f13144cb4b8cfd0f70f0f0e0bd2b2ebf64

  • SSDEEP

    1536:dpFfXCWMNto6P1R8w4HruX+iXYP9Va9VUOF3mVLkW61NdM4W2pO2q6k:PFsNV1RELuX+iXYVVoUOZm5KM92E

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06a48230b14f14b06514bc47fe7a876d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3068

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          f6f142c29034e1cf1b85a9e7a2d777f4

          SHA1

          fc7bb46d9267f034043a09d5f3e24196d76fbf9c

          SHA256

          c8f902c8400050593ee80c1c5832a1ec468c5bd45160415416b58e0f30fa792f

          SHA512

          8f7ac1bd3cd429afb1f63441d6e4c68702841e4d11417c8dc1098002ca6e3366004404182cf114b788ec527546514e6a0ebe0bebccbe90e033047b6a27357665