Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 13:09

General

  • Target

    2e035aef0273fdde41411c419e862233.pdf

  • Size

    89KB

  • MD5

    2e035aef0273fdde41411c419e862233

  • SHA1

    33c09a1576a12403a4019860a2cdacc9ae95eab7

  • SHA256

    3b38f9f58b7f7b2e620090aad34003efd2f9a5e3220bdd3e2f34fcd3173d1e5e

  • SHA512

    0e7cd70c5582f5ee10064ba1bb6689db8ce50533157cc69929b29cfc86a89666775403da6fe0542038c1121a697ca23fa55c8ecb0cb16850fb27b8d6b3d59cb7

  • SSDEEP

    1536:wTpUj66hp9zr6brzQnyhEhyHVW8pO73W9z6SwyWk0Of:gY/hp9zObPwHhyHU7kDB7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2e035aef0273fdde41411c419e862233.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ea83877981a4fb381462589415c269a9

    SHA1

    a78ac8d71fdcf1cb3ef91ca6201bd1fa42a12185

    SHA256

    5b4d4360c2bbb8ed79b7bb89bb47aea98a0739944ece3a0aa333c0662c44523c

    SHA512

    58d1e19ba1e7d1edc381d70f35dc8a11d9d02db2251df07453810bb6a91467b5d755dac6dcf2a8915946492070941b4d3d82f0d0ab0cfbe7220b39c3f9818c0e