Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 23:23

General

  • Target

    06d0e40175e20595e78bd4f2298ce51e.pdf

  • Size

    80KB

  • MD5

    06d0e40175e20595e78bd4f2298ce51e

  • SHA1

    e00ec96c1ae218dbbf1ee843d9aea4b20965dda6

  • SHA256

    425822d2707a22c5152383a6697166369e96ccd2ac56dd8633632e8f31cb3baf

  • SHA512

    1952a17ca6dbef15d7a78f3f5f4e86921d4b1c5b1452530e822076d76a6e9b28c518d917022ab4aae1cc9a41a72866940f68a2e37a590568b7b2db85e79a00bb

  • SSDEEP

    1536:w9mj8u6mSMZUGmThv/7yXvArHc7j4MCSOBf7vbpecrBWj+Pa/AgMPzwewd:2Lu6uWv/7yo7Y3dEb4crEFkPzC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06d0e40175e20595e78bd4f2298ce51e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    de05afac8a381e06b9fc4727422ffd29

    SHA1

    3f57d270df29a96e23d205ed9d3a613501fbf11f

    SHA256

    24d959141dedc1705035219b3871694e73c569e0626fb0a2bb586dd7acda7d42

    SHA512

    fd5c1ea093162b52a2b1bae85b435e2b7c9e99e43b6e3e8f9cab57f33b1436895ab3c35031991b897ab7b1ef24f31985db8e306d0b1ef0c6ed6fd10bb233b676