Analysis

  • max time kernel
    145s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 01:00

General

  • Target

    2274e40cb6ddb82c3f80f5e3baa8923a.pdf

  • Size

    120KB

  • MD5

    2274e40cb6ddb82c3f80f5e3baa8923a

  • SHA1

    33f1561d5f0a890cdea4cc18169611036a1767a7

  • SHA256

    fc54a8b5650d054d131e8a15761a7094f876faa60f7dced6abb120e99577103f

  • SHA512

    d5ecb2d2d78497e754a023d7c02ac39741a056af935e5e60250184f2fbf251879f8885cbc251da879fd5cf2285a74b54f718867ce90a253c972d1f5bd88549cc

  • SSDEEP

    3072:ru6s+jlpG516gispPQNgzcHR6X1XiZ6S4fCC0y:y4jKtiGQNN6RiMDj

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2274e40cb6ddb82c3f80f5e3baa8923a.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    47fd22433bd2ae580a8c8c352f7d8b91

    SHA1

    003daaba2d406b3c96a69e747605ae7ad8e1e6fc

    SHA256

    d25a2dd27dccc38d825a1b9c5e93fac2ca3ca4a421f71338db442dbbc17797fb

    SHA512

    6fec22b00d6f688d0d4ab1785586cf4453e68791bbeba4d118d82bdadfd83b363dc9fe9b42e6309fb898be5acf6369a8e58a75464341a1745e8f327619bb17e5