Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 18:05

General

  • Target

    Lizenzvereinbarungen.pdf

  • Size

    147KB

  • MD5

    d0c927725da4846d7a1c6159f79079d0

  • SHA1

    d748b66ed8bc3fa7cf1f904a86dce1be72668b84

  • SHA256

    fc5845ac5267b5239084a66876b3285088c26301884bfb6f3c77040b0e947fab

  • SHA512

    65eaba222617bb1e2a63b819665717fbac05873e32b1145645781e53ea81e2de7923c6eb9a96d1e1304b3a1a06ffeac0de19cb7dc4bf9add574b8dd6ceb0132e

  • SSDEEP

    3072:8WUAxln3rYBDCK8+RrUlaR2ud1ML1mDVzbbHUALDkZo37:8W7xlnEpCrQUlavd1MLEDVznUALT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Lizenzvereinbarungen.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3c986dff0cd5611ee3a13ef652c39010

    SHA1

    e66e4b2c14742547d28adafbb0ee2204ff4b9cb7

    SHA256

    63a9bc8451fb38138d11e0041b848e8caad226898111be85ec4b796df4f08fc3

    SHA512

    6741b45f0415ca893973c7e6360cfd50bd0c506e90d2e763857b30dc550b9eea2d9a8776d178c859d913b07c974c325f0c83fa123e8714fd9cec93c19d05174e

  • memory/2648-0-0x0000000002D40000-0x0000000002DB6000-memory.dmp

    Filesize

    472KB