Analysis

  • max time kernel
    150s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    30-09-2023 07:13

General

  • Target

    PL23XX_Prolific_DriverInstaller_v206/PL2303 Windows Driver Manual v1.23.0.pdf

  • Size

    1.8MB

  • MD5

    2b7e8222a57adad60e0d1b1166162741

  • SHA1

    a1a810727f5c2df6966d69d46cc6b0acf7119cdb

  • SHA256

    6be6f8f0e6195682c55506b0cefbb8bebfa66144eca18bc9dffb159021bccd56

  • SHA512

    84fe733c875f2cc9774a78c1cf51e51c0c64aa9e869917c442a566ba7519c27ad33927e92974a8c24a98f15fdb5d0eea8231de4d0d2293237f9ce5e6a17340f9

  • SSDEEP

    24576:mMuGTZ5JqIq0xMMYV1HHeSXy1d0ChLCFYEghxJbrXvYRF8NagZ/jsS:9rZ5Js0WBzir0ChX1XQF8AgxjsS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PL23XX_Prolific_DriverInstaller_v206\PL2303 Windows Driver Manual v1.23.0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7ea4e359b9e3ec910774f972357f001f

    SHA1

    aae29f6b33aff2609fe857f1bc503d1a591f8bc9

    SHA256

    cca3e013dfe8a96dee2ad9d5867fd71d61149b7785abc8db759603f35e9be7d8

    SHA512

    1509d53e68c66808ac22b990bbf63fa7f2aaa40e155fe29760601676f03ecc895e5ea0f7fc836e56a5ba8e384148a8a4a700fc4383d52a093a3289d1a89051fe