Resubmissions

29-12-2023 08:01

231229-jw3ndsgah2 7

29-12-2023 07:56

231229-jsp8wscgfm 7

Analysis

  • max time kernel
    264s
  • max time network
    316s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 07:56

General

  • Target

    _85775FE8A80EE9570FE7A08C75F4D5C0.pdf

  • Size

    2.1MB

  • MD5

    b7766f7cd4b70f28519f0d16e1e7687f

  • SHA1

    a4b5641d278009c24dbfc11182b41f502504cbeb

  • SHA256

    9d2a61e421f472e1613b24ec279f7e673e23db4d12d7784db8a1919fbe01f6d2

  • SHA512

    195f0fdbe9bb0cba144ca731396a0af0a77ed91f46ecce80f3ca736680c67c26a6e3ffed37e4f9ab2c9cba96b109870f16bd95875ab8186afe28eb4eec89b945

  • SSDEEP

    24576:UkA26oePASBpLlChlVUFAQsghGRFybiGPtFn9FwkS7UHLH22GDITmdLttmqrhqVp:hA1doqMRfDfQiKV8gWZtt3hqVp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\_85775FE8A80EE9570FE7A08C75F4D5C0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7ed1ce51022ee286e9135adbbc8f9f84

    SHA1

    4c8c5ff39b8926395ca50a2d5ac11d3c910e3efb

    SHA256

    fa1d1cf1bddab04619ff2ed916b18eeac5a3b7da6ad20b8f22d1bc1e0824b5e7

    SHA512

    356f5f7c9985260e5f6ae2a7a28cfb0dafa44d029c55f8f7391c5e86bd2cd4e1f6e3facee1a7f159a6dbb612ccaae08b1ba8a3d1888929f85a0147f39cf74765