Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    24-12-2023 17:55

General

  • Target

    09d6bd2182abd0f09d7ce39ba73f8887.pdf

  • Size

    92KB

  • MD5

    09d6bd2182abd0f09d7ce39ba73f8887

  • SHA1

    fb42a7e1bd690a04ab463eb4098a999680a4e381

  • SHA256

    a64a11e014f178f0b7d1649c235ae4a56c07cb7bf34f947d5c0baee735bebb65

  • SHA512

    8562342504d188fa7bd16d151c3f238dfb118f9ec5e2aab28aa29399f306cae6c06569449132c4354fc5cf9e7056c1ba9bf6e5717ec925364c0c23887273cecf

  • SSDEEP

    1536:NMHn0ZRGNN9oQR8DYQ5WUctFouISK44NxXWIp9mjFTDYInWapOtQCWva9QYDFig:sn0qNNyPW7FoDSBExOj6IItQM9QYDb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09d6bd2182abd0f09d7ce39ba73f8887.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b4cc50981aeff8b8d49f1a8e43fd34c1

    SHA1

    d7511dc58b867f63986d9a43f36d8807a667bfd3

    SHA256

    4f921db1dca36a1d78204290012924ae3e24fe8af4198d255bb2f5de299cc048

    SHA512

    9083c203a64022ef2d1dbef1d4c841214f4baf849496a834f371f6fbc7d668e4462df3ce75475651c1114d4ee2ec8bc728d20cbc084da58f76bf9a375b0531e7