Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 05:09

General

  • Target

    06e94b426e0e51433ecb38da65182fd5.pdf

  • Size

    118KB

  • MD5

    06e94b426e0e51433ecb38da65182fd5

  • SHA1

    1139f57a73197d0edd40708ed74daa82570d0252

  • SHA256

    315a66a32d12b27c082dd9c91030c89cb171ef0ae8556faa083d4cee945ca855

  • SHA512

    4a207e45f0a7e12c718241e6ab102305911197ba970f5819e3b911456bce4fd38d17d6b0bf4b00eee83d08315b1eea0dafb10b5ba13592ebf2100ad5523b97ed

  • SSDEEP

    3072:Q2LuUH8O5KO2kl+dPX3DO8YN97qDqBbP0YjJoO/+pHhEe0qfCMJ:1XH9ekl+x3D3ViClhnJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06e94b426e0e51433ecb38da65182fd5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    54e3e4e4e8cdd09097ac5a904238694a

    SHA1

    51ac33affcb27bf4a9c00daadb38c05e459a3a1c

    SHA256

    916a35ca46d3f855a704bc427aadedb2cbccf989afb998463bb6c390144ba0c1

    SHA512

    60bb95bd6d851456cf30be15b79b477f77ea08a8c226c4b532cc2a4619e92c21ecaadde139e52ae20f59c241b0911617df8b16da73b5c8f8ae31b8a527290604