Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 01:59

General

  • Target

    23a2e4c77ebb7dc83f4c43dc05142903.pdf

  • Size

    87KB

  • MD5

    23a2e4c77ebb7dc83f4c43dc05142903

  • SHA1

    7d3785b87b6a01df5dc4c6a924ba77d50269d17a

  • SHA256

    5d94eae47f965bb34936706854209bed496acb065a8122b8a0e0f77aca2b0680

  • SHA512

    29c28d98d6f9390b32cfa8190aca31b468e1af662f5a8d9721b8c7867666d75592cd4b8b93a4d88c2eca1eb9769927e0059cf065ed55cdbb4a4723117915956c

  • SSDEEP

    1536:1w5UlyI4efyGWtNQRbYkMdIvPtNrud+2PSInnRQLTIWapOtQHWdF2/uL3ZBjnv:9yITmtNQykMKvDrudbKuQ/xtQSYEBb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\23a2e4c77ebb7dc83f4c43dc05142903.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3032

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          d5f40434e84a7464702c36a567d050db

          SHA1

          a5a32caef102737f285223810d6d666420b7d6d1

          SHA256

          5d5a272205001edcac4c4d7356e9dec0d284662316bf0e7a54852f4fa8e2e5f0

          SHA512

          5627d5cf6d2e55a9f5dc3f83d56bb63e7b6e6be5d11b26a88fa8853bd3c596e49cd60afd147e96532d1e9be0e9c7471f6c19c63b6e9d042679597362b19b18f9