Analysis

  • max time kernel
    150s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    30-10-2023 07:14

General

  • Target

    Xaw-VPN/Xaw-VPN _ Secure, Fast, Free VPN service for online privacy.pdf

  • Size

    1.2MB

  • MD5

    03699f66473a7213d11b8d45ee796b7f

  • SHA1

    7841ae3da113d40174b52b0c55b2881acb451a51

  • SHA256

    8d96ee4906fa9f4bfef2f8452eca70a114ec399b3887639567110aaa0eee89d0

  • SHA512

    d63b182af0033026d33311e053b1169ff8465f33282bf6e7bee9ca9c6050dd2e2875a3e0e0499445f68a94e768f23d199c2223936d363cf819416c7bbb732029

  • SSDEEP

    24576:7fG/ni5tTjd4TvZTu++ay4JAUT5uTBIK3DbuwS:bGfQJjsH+T4TgywS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Xaw-VPN\Xaw-VPN _ Secure, Fast, Free VPN service for online privacy.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    27701103a45f5c101713182cf9b9df19

    SHA1

    2727ab410eb378ee63f480ef9fdf99600bef9f73

    SHA256

    50b4d576e930451620a1123546b302319352a4a28fcb8311cb31a7d6bbe497f0

    SHA512

    2fccd971affe71d8183a1bfe698453e9f2191daea2810b40fbf29f3e70d292a1cec9e689d1bf90c77b75adb5782b8f9dbad79987168c076dbedf821adb9aa599