Analysis

  • max time kernel
    122s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:53

General

  • Target

    270c4ee93aa56a6378c7a5a04ae24c06.pdf

  • Size

    81KB

  • MD5

    270c4ee93aa56a6378c7a5a04ae24c06

  • SHA1

    d47fa3459e5c2ead03483893333c901641bdd88a

  • SHA256

    0d54eb34d8eb0ba46ce1e6c318812d440c7ce982da269949f72f9cf583e31e72

  • SHA512

    6b87c1c260ae21105446c6274dd771a2ab50412ed8341a583025b52af0ba1ee5b220b5c846cc2df6ef73d726c098f2602ba5d1b6d9d689936e071d68404c987f

  • SSDEEP

    1536:BaG6dWAykjj63riv6vDe39lFI+CvwrKWfF4atBrv5l2/EPF:0dF9jjLvf39lFIOrtr5l2/q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\270c4ee93aa56a6378c7a5a04ae24c06.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2936

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6cd22d8f1ec2333bbfc8ed603d67e0d3

          SHA1

          9d9b5fcf42944c6f15e36aa672209ce8d49ff2e7

          SHA256

          2ce439b4edca7def9df2586eebeb45f118ead8d7febf75fb83f9143c6ff75f71

          SHA512

          cbed725e4ef15d8fed25b65bcea788a5fb7bd74da72f5c24e325abbc6b86eb37223e634691ae7ad01d17c6ee436e8397db6d991d1d4c9b81829c2b567cd60cb3