Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 00:47

General

  • Target

    222fedaebc5423784255f4c68413c5ee.pdf

  • Size

    77KB

  • MD5

    222fedaebc5423784255f4c68413c5ee

  • SHA1

    e7226df0c28ffe292d6314d7fb4e634cb11a69f7

  • SHA256

    a3f50e3787a79bd4b702e5e0c6729cb750976b673b5e53bc5cec80f5b2ad563d

  • SHA512

    7e5b7e1c2079186c2b21c0d49ecdd3405d736fb02fc7a089f67283778178a8840096363c80530a9817c8e5bccb8cdda7a196cd5a35ea219a30cbd85a7d833c4e

  • SSDEEP

    1536:dRlEoCBx5r2GEC6iwXrs6uMB+1hX1afsMvtvGzRJ+z3H4Zpq:7axh2o6vrs6u3v8fsM1uzbSIS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\222fedaebc5423784255f4c68413c5ee.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2648

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fdf534836a2a06b32438401e2abc25f6

          SHA1

          a78030b4e82bb0fa4b5fce3de9ed06ff9132ed78

          SHA256

          8da7002303546990ca0600464a51c0b694af089a5509de40d1d569a0e814bb73

          SHA512

          5ae90b9182aed59335e50875e6412a9156bc1a3174d51833cc76c173dce62eca1c0fe8bd9bb21d9d281f80e221195fe28b4ee7ac26b507a2696ac0ceae694151