Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 12:44

General

  • Target

    272bab38991e7d29c6984ae3f49c5f2f.pdf

  • Size

    77KB

  • MD5

    272bab38991e7d29c6984ae3f49c5f2f

  • SHA1

    432b9bd88c68a99a9ade1dbdb67739e33eeb06fb

  • SHA256

    ccb16b68621296f5f9ce8b8601386ade8e635b0657fed54d162f65fc9e9b3964

  • SHA512

    cf9fa7f8d7c6e052170be18f6675b6eeeded506d424d00052a842e41c0009d3b3321eaa1aa2f61bf567ee4d574b4794fe610af9f8171af95f96005bfbcb43d6a

  • SSDEEP

    1536:xrOgOgNsbEjU0ZiwRhJjtP5GUirXDWCpOViIWhXO6dbV1MnRztJyJ:xnCH3wR15GUvViR+6dXMRzA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\272bab38991e7d29c6984ae3f49c5f2f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    acaaa70bc1568bfb6d91da7bbed482ad

    SHA1

    e1ad847a569f64c31e63326b5b7669c473936347

    SHA256

    5cadf5bc2ab09e670f19d6322e0f8175cef0a4e18eac34b7fe8d180a4213c1f0

    SHA512

    4e42e852dbb31e9a984ae5dd2b03dff029e95c5d6a49204b8c2d842de1e8a9e4b8dbac9fc49a17fb84f697354a1a4101b37f47f71d772ca5d23c6de237e9e6c0