Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 05:10

General

  • Target

    6fd0719c216e10d8220994b141c14afe.pdf

  • Size

    34KB

  • MD5

    6fd0719c216e10d8220994b141c14afe

  • SHA1

    d4a1d3c2494c80fe9d90eed385b102c5de1bea58

  • SHA256

    180aaad7d2e07835cb2ccda4d5022a582df4f993dca77e2cf9cfcd6b9d1f7979

  • SHA512

    9cbebb11ec598225f8f04b15b0f444c646439e904d25fb43e6c928560ac8b77ca9002b77abc857aeb144d4d61816254ce4f4b9161a589321ea7aac4832c5c1f6

  • SSDEEP

    384:2yczVYlCkcDhsvkrkj98PLoW6MAvotnUyVMXgpJWeM6CUSnlpJjMwHsPiEML16ll:EEKhs58PkW6Max6MQpn9Pc16lwq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6fd0719c216e10d8220994b141c14afe.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1684

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1cdb01795345e72c57c5b08efcac008f

          SHA1

          b05c683c310271b6ca13ca2c9de7a03580e26efd

          SHA256

          23215bc0006f596940f1634868481237fd84bd6e4e4ee1db7122b289b4115cf7

          SHA512

          f09d18ac335c708a48c7d10b6f3b61cf2a3626c0448ec7ffba19016a33356aabebaca8f08168b16464f26458670d6e5ff3af1a15bc29d0e8d5be7b03716e3a8c