Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 23:15

General

  • Target

    06a8cf2d3efb4cbc45d317b67bf0dd8c.pdf

  • Size

    90KB

  • MD5

    06a8cf2d3efb4cbc45d317b67bf0dd8c

  • SHA1

    dc5ffc48eded217c0558276e5634c6cb0377f20b

  • SHA256

    82a721158c00e747fd4ead7e2f147f15c09113473f82c7be1aa75bbd00bf746e

  • SHA512

    32bff5045245a4e201868d0c5d9f3b5f3dc89229a891119a6ab899b1b29f573dee18615dcbe8a0193d9cd34c6a2bcf7f24ce74784f232f3ee9ae3e5b9136a792

  • SSDEEP

    1536:Z5WwYrd7W1K/C2WH3UySQOWIRoLrTf1XS4w+amBeWHpOv7PvTuqpKWA1VRKdJIIc:Urd7W1KdWH3kWcAXS4wR/v7qqpXnQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06a8cf2d3efb4cbc45d317b67bf0dd8c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f5c625f4cec389484f338646bb993fe7

    SHA1

    72a2c976323e08d427bf2e6613f5ca6aa303ddb7

    SHA256

    66d2c8d04058a14fa2f152837a68174ebfb2e28cb19e7b66a2b7ceba0661a2b4

    SHA512

    2dea6ff721bfa47ecc3a1b6b3f4211ab7c60aef702dbc3366320e7b664589193b3e0635a1abad03fea986a3325e63a821f377252a46f75c3918e3f984497eb02