Analysis

  • max time kernel
    209s
  • max time network
    49s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 00:33

General

  • Target

    21d6dd3bce814b22ea44a90035e4888c.pdf

  • Size

    91KB

  • MD5

    21d6dd3bce814b22ea44a90035e4888c

  • SHA1

    367e86cf27766cb3c03537df9867a6381beab603

  • SHA256

    273c1401197e1c1e8529fe4a9225f4dec4f46e63fe98e72c79099b81b927aaad

  • SHA512

    0c4922120a59af204fbe78f9cd621ced80298f6c6cf9d2672d4caf5cf1890f3a471ab67ca3fb6df0799a8b0a078441343f6c5841fa8ae2abde7fbeaad89fdbff

  • SSDEEP

    1536:2yC5KQFu8pYtq8Y+OipG6aVq55H6kau3ZCSVb1bIfecOqNFWaRbkoeiERYa3yNYS:ZgV6w+Oi06r5l6kau3ZlbIfzOo3eiERm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\21d6dd3bce814b22ea44a90035e4888c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3020

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8bdcdaeaa95540078e3afb9052b92496

          SHA1

          fbfb9364056d541f885c967ab5046d8b8adcd1b8

          SHA256

          25d8e7941e5f7c37bdbeea0dae2e45fd3ee699851bbd1c7f8199326f070d27c6

          SHA512

          a5c3d34e2aeb74424aae5a85c288a0d264defe24762407dac6939f21968bb6b1d31c95a01e5da9143d3cd325a57e7b0416e16e69e8c03efce4c9aeedb1cc2e90