Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 10:31

General

  • Target

    07067e6fefc3428edd6205c43ddc124d.pdf

  • Size

    84KB

  • MD5

    07067e6fefc3428edd6205c43ddc124d

  • SHA1

    870f81fa2ed17f42c0bdec5917399ce37a18aab6

  • SHA256

    d5848148907a5471ea346d329503e4b31a3f3459b18281af5cfb25127bce801c

  • SHA512

    53885b3c5bb824735f21f5807bfde28308b6f50a1df07d51436cc74621bd1b6b3a2f22d0344e433940d89611a373826b00f1c583cb4d55075c8f1e0bf790dc52

  • SSDEEP

    1536:E/llhXhoM7QVeWUD6K5y2zFcOK5OjlCWFbWCtFZIWqQAZVs9KWApO64C+VGQCg:WllhXG+os+8Jz7K5AlCWFtFGWqE9B6q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07067e6fefc3428edd6205c43ddc124d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e992dd2b61a9afb69d0fcef09b1a3425

    SHA1

    8f0fac4748fd583aa4cb94956e90e8a919feaeee

    SHA256

    9a3b2c035523748b3ef61aaa5eda28547974b12621e2bf78d7c073bf57c8b4ec

    SHA512

    a814b929ea401cca0e8b966225931f1b6d7184e8246b488607cd0f4a4d0d3d7d1d47e5eb8c749da5675f7585731fc7e0508dd35a33351a4fb0c5ba6057b85a66