Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 10:30

General

  • Target

    06b9ab3a0f0b8654b842ff483eb7e3ff.pdf

  • Size

    80KB

  • MD5

    06b9ab3a0f0b8654b842ff483eb7e3ff

  • SHA1

    f70f04dd04f7d629fbe5761868f4c8dcf04f453b

  • SHA256

    8d5420071e730516a0ad096038156113d5b1fc6517b4dbee800f7d6aa07a2455

  • SHA512

    8958ca13e8aacb0e89fc1b6dcae5dd9d7ad1d4403e9066a85535241f509e08112e61a21b8f3f24ad34aa9550fabafc888335fa08fbb42c7d247810f7f6dbec86

  • SSDEEP

    1536:8v6Jl6bULfgoq0hizu+XK61WBWCaWypOlL89PQpiWZdVelbL0s5C:tUbUfO0ozuQglL4YplVeed

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06b9ab3a0f0b8654b842ff483eb7e3ff.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2fbdb19914ec96e9879130f50ccb10f6

    SHA1

    426ad64948a414a9c83ec59a271d0c32fa3a86ad

    SHA256

    499a0c9cada4f6a0b83974189177dd8596f5a8edf37a8f8ff41305357217d826

    SHA512

    613e4290fb9c1722abcdb95b4555f1c62f7c52820efbc265dfe50e966aeaa0a8bae8ac3644299bec30cd7b9398c55aa5a1e009c024223d128cac24336ada8351