Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 16:29

General

  • Target

    2d3b2e80a555d9476062abc3bc76897a.pdf

  • Size

    102KB

  • MD5

    2d3b2e80a555d9476062abc3bc76897a

  • SHA1

    5bc01e0de6a64556c3219d25e23f3def1c8b1b55

  • SHA256

    47aab691906d300b46c7cdd1587e9fa6a1fca68c2b5dec14b8126aa1943f2c9d

  • SHA512

    7359b212b7ce4bd0edde5aebc340f9bf3c3dbfbc0b2c2b5dc9ea85bc084ead00218d001c83b85c5d183bc50d680a3f01cf12845e94c56242d34ae3cc9ac7088f

  • SSDEEP

    1536:fcHXTWnUcd8U3zggjfMHeaS/8tmXs8aWlgYy90+iOWapOtQkVkKEWTylvJ3o4for:kCJOGkgTM+//8x6Jy90rTtQkSKqlx3ol

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2d3b2e80a555d9476062abc3bc76897a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2768

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          1bf58393d336bd204bdcff7b8737b074

          SHA1

          394ff1079090ab538a3e4f6993aad0008172bec7

          SHA256

          589c5a09a991fe2252bc7715cdcb4f37b011b566c98aa0c3b3cad1950741627d

          SHA512

          38c508bb7b0f7de1586c49f7088d5d2ccffeaf15b1c64d100cb76824b668c3c3892cad9796aed21beb4bc642a9da0787d1ceb8a89d9c0788c2644b82d9dfdc2d