Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 16:56

General

  • Target

    2edfc6403bce637e80564e9721f3465c.pdf

  • Size

    77KB

  • MD5

    2edfc6403bce637e80564e9721f3465c

  • SHA1

    d3055ec3a63637dda7fb5e0fd989011a13fe5543

  • SHA256

    3998dcfec1974d262ed3df3ad3d10d88d4fdbda0b612fe990c7848c08a9dae61

  • SHA512

    5d280bf1d97bf52b373b46774dd9bc3a8255cb9499e2d7d76518e67b2b154d9d1f7ac40c3120cdf72fc50f7e17e3a6a07e504965086a606e93762ad263b99a35

  • SSDEEP

    1536:hjawjZ8YixAS+adVu49hRfbD8SFwR8SeOdbqUPwJReA20XN80ZxH:9RjZIDLhBbASS8sU3zN80f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2edfc6403bce637e80564e9721f3465c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ce94ad5d6bda6a3e0eae536943eae4ce

          SHA1

          d8754cede2270d72f6a183c72a78fb19f3c7e4a6

          SHA256

          70bb7ca19852ecc798d44bf45fa21d04af49f26744e69c1c6f019ac4413c6c88

          SHA512

          043b416188008b455cd5afa97f484d35f78702f2ac049546f4e243120dc9c16ad852151f6c8b627b827ed01e1a98f490755b8fa80e6e5e41fd557916c261d916