Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 22:34

General

  • Target

    05bde9905d43f9842db5f9841cc0b2d1.pdf

  • Size

    23KB

  • MD5

    05bde9905d43f9842db5f9841cc0b2d1

  • SHA1

    ee30ac03a0cf9c1d57960b154deb42e72b523c8d

  • SHA256

    636d530b19a9e53629188d6b4776530c9c068b61b790961009f85b6d58012140

  • SHA512

    3fae600d6c062a035fdb427bac95c7c1301d80f95b00431455ce9cda46f3fa3897aa8c9e0238de7b1195a02c169dc41b7a6364a70ff3d95912b7fd71f05c3c87

  • SSDEEP

    384:Jz8s+61y/ZjtsgFDHqc2hi1Ynh1ZxfiyuMsPDvKyEct80/:JRh1OZjtXDHoo1Ynh9fiKsP2yEct80/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\05bde9905d43f9842db5f9841cc0b2d1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2004

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e035b0fec0fd319a19466cc2ff461cb2

          SHA1

          3b872def0dab629ba5a52c0b666610004f1f8ab2

          SHA256

          cb945f90df56c0c825edd0418b699c712b29887edf2adc49b4a4b1f34516454b

          SHA512

          5f92532f2cabe97b4bf3c12a2214358061d5ee274a7a690f6f9b1642727b98e66f09a644527420f5680e94aceda44d24de6172ceaa7feae9dbb6c19b2c642f87