Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 04:24

General

  • Target

    2809a74d0af27550de3e8691cbcbe7c7.pdf

  • Size

    87KB

  • MD5

    2809a74d0af27550de3e8691cbcbe7c7

  • SHA1

    2b1404f6d139cd968a2128db8e04e2f5e256697a

  • SHA256

    0b370f159a164254404c358299e573669e0ce1a1e3d40dd39bfe145665565ebe

  • SHA512

    27bddbeebfbab75298e056731a0494ee0638c848c983c1a4f561141a8be59217f5fdad7c4ea1612ee2b7e666a6b4ddc88b803498cf4ec95d411208b19941f987

  • SSDEEP

    1536:NayDj2nuHDtNDx3bJkEoRhY6aVe0KjkjcmHADob0895bdWSo1aG/7/hGeWapOtQw:kej2At5x3aEDLVBEHDob08DNnA7/hGj9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2809a74d0af27550de3e8691cbcbe7c7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3c3701bb9a9623b66136e91539891e77

    SHA1

    3becaee0cdd952eba69cbd09496b745d150c3d82

    SHA256

    dd69094b9d1d09af62699919caa07ae87ffe1b22dd2526a1d25094698f7681df

    SHA512

    651036df69795f767ed160482bb37c57debc16f988c9e3d53d9a458023daa4fa107dac86fb50519ff469ef5d9bd80758e25455e10cada6d42d15ff5e1a7d0e14