Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    25-09-2023 20:37

General

  • Target

    How-To-Install-Addin.pdf

  • Size

    333KB

  • MD5

    f623721e1d25fc4cc9d49bb4be2d11ea

  • SHA1

    42e84297c8420f99c43239714b463c91fed3eccd

  • SHA256

    1da33f02f009031c0a6dee86db1c9cbaf345d160965fe30e50341a5e0dc5541e

  • SHA512

    edb95722090d2945af816897a4970ff87078a8fdc30b5c6d27b64d76fdd700476bc8fca48ca07ec56654de40f29030ec3526261b5c674592817b3e6a6a845c29

  • SSDEEP

    6144:Izon0R15nANg6ZjuGYncqg49AMBYkcqmBY7TKYByLUT01hg7mgUdg6pmyoO:Iknc3nANgdGOeL5g7TXT01ymtxw2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\How-To-Install-Addin.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    88c874fa674b54a2948cde97197c74c6

    SHA1

    b870db2df3360a5130fa60711cc9b79c8bffd511

    SHA256

    c8d21f173c68d0a91fa7b8b800b88a9a1bfad5892527681d427454b94ecce308

    SHA512

    85c2f3c7f6c8912559b2c72d99ecd97ad44b4969e8b0a80ab1fdca5e2993e65d96cc85e9b8190b83d49fc1682e881f4313a412293ae04a6ea56fdab7175ef274