Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 04:04

General

  • Target

    2766d4fdc3c1f54569cc3052bdaf248f.pdf

  • Size

    91KB

  • MD5

    2766d4fdc3c1f54569cc3052bdaf248f

  • SHA1

    b871b84de60605125233195c848b75971839da62

  • SHA256

    b31b34178dab46c44de2595fa6cada3368cbd51c0838a74921efacd10f662bcc

  • SHA512

    d33be6b9ead87d7578ed780b95ff8186f947b0e940edbaa8c7aa48be17b1971ce253c9b159fe6df4e035226ea2928b2790f31a4cb9b34a1e4a56a5fc42a65942

  • SSDEEP

    1536:GC7YL/IR0q0qH/etBfw1KieIyNcL+HFkgdvLThzMWFFx1VyF/sHVun7D3L8HWQp6:t7YzIR0jqfEGKVI6HFkcRx1K/s+7/8yb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2766d4fdc3c1f54569cc3052bdaf248f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2164

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          78ed82e5ddce363c66b0fb7ec9df0eef

          SHA1

          19845e985603fdf999a64f52de92c7f5a4795e4d

          SHA256

          de11372734bb3800e964abe8e897755aa5a359e46b72062e715d52befb4b9bab

          SHA512

          9d53183d26b245e371895b16f3606d070d55ad80adff082d470bd99d439e42f98a51829de296a9507f7b6be188a8c9ae6a5d3c5d33180d7e35df9d703c5c2d0d