Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 23:29

General

  • Target

    06efdf4c1f4f682ca5bb7fcfacf20cca.pdf

  • Size

    88KB

  • MD5

    06efdf4c1f4f682ca5bb7fcfacf20cca

  • SHA1

    2a7dfcaa1a9fb88cf6fb5a381d7110ffdf2aaccd

  • SHA256

    f6ef16c684f632d9553954ff7182b63fb83306b9a1fbc704ea6bdfe4f0ca436b

  • SHA512

    d0bb2bc51f3ac8798bf5fd50c15f362377591a0b69914406d5d404f46179d3e54492e49f43f42360c88a583d824faa4ead5acc448daa78f44ffe7144a2f8bb1b

  • SSDEEP

    1536:Gv7gPWBHYm3oD7/AOuV88QT3NXWrxBUEKC3SU/XyP2iWOpOaZEWMcOXq1Hv:2Mm3sTuetNXixBpKayP23aZpiqN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06efdf4c1f4f682ca5bb7fcfacf20cca.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6989f8685f1d725a047e2281ea2da480

    SHA1

    89c48fd03dfb4dea9022ee5cfdd7de8545c56b40

    SHA256

    c7d4fdfcad40238636228f318b09e50a3b6f1addffa0c236733c44472f339b49

    SHA512

    bf2a9a315a53691ef5559e55489810c81f98016fb055f1b196503d2fecf70ed30df572da052807c8d99a158aea7ee03b7cd91ec0150f80025ff90445046b7522