Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:58

General

  • Target

    273551b3a25adec782a8a0fab57e2cae.pdf

  • Size

    94KB

  • MD5

    273551b3a25adec782a8a0fab57e2cae

  • SHA1

    257606a9abab7679a5fd7dc3ed59271065586fbc

  • SHA256

    8b422874e7481497545d02b55fb001b6cfc3f5593775761c2e5f40bb8a86b267

  • SHA512

    fc7f9267939415ddfd095cbfad0d8a26e75eab8ec9a1ffb82c8cb9418292a968f9060135459740fa473d3fdb4f476013c6cc8f00f7692158c5465254ce28df1b

  • SSDEEP

    1536:fRQNVq/zJhvdsXsW4py5xOfie3axfNG2niVjTVQn1WwMLRXC/gC8cD2NKUW8pO+2:JlJFOxOfieqx8nVjT2ERXdCXD2NKv+SB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\273551b3a25adec782a8a0fab57e2cae.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3339787daf0d5d01893143277c2d5e6a

    SHA1

    e5b59eff0e6067e438b3a74614104c77ae835a38

    SHA256

    c29bf4fd4d92efc3b14b0dc8d2b69d90015316bbced8aeecf139fd8aa8e67c08

    SHA512

    c3364333f9b2b49e17b90258d78548bf460e2b4cab7f0d21da723204441c6e82b6a84e6c8ba828142e00ad27005c7e50df651ffe56cc99dc6e4e3fc4b3c3edd0