Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 23:23

General

  • Target

    06d05c01810a2ef964588aea6c78f0b7.pdf

  • Size

    46KB

  • MD5

    06d05c01810a2ef964588aea6c78f0b7

  • SHA1

    08642313cc627301ff18cd5860a60261c0f1d48a

  • SHA256

    38bab0abd73126eb944ff330f24938b0ec829e8783d29171a150a821ed39fca7

  • SHA512

    e7d00576d8d713f70b68ee289f8f2bc3d20602a795551ed0624962a9fbf93667180b854700d03ab2a9ee5e2cdc4ff3df0842fc256fd6359ba8399ca7f82b0ea9

  • SSDEEP

    768:TITLgil4i8nsptozqGA9FhyhqVOlBy2fEo9pZHmaJ63qC4aA9F:WEi/8nkXG8MqVOjpso9BJOqRF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06d05c01810a2ef964588aea6c78f0b7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b177165d12a439e94500ba3bd1bb0e6f

    SHA1

    59d639c5a69743b85974d145ea07bee4e3a029ab

    SHA256

    870fab2598fb481891c6e9269715935af4496ee40cb2b04f7858c1b22aff75a4

    SHA512

    73075b0d6e774d87629aaf4ecedec11ddd84bfc6ef42941ed20e6329ff7add461a5820ac1dd37825cedb910cdde5efe5451b3e0f1158a8ffda32b8388ec68792