Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 04:12

General

  • Target

    27aa6d68b5178be4f204474685db6183.pdf

  • Size

    92KB

  • MD5

    27aa6d68b5178be4f204474685db6183

  • SHA1

    23cbe232d78aa6e455f4e9d1ac9df107469c3dd5

  • SHA256

    07117c96f47fcc04a7a0b18893b69bd3df614f3cab60d904d5448000f2a89db3

  • SHA512

    4593eb106bb86b36ff5204472a6aa79faa4425630f56ad2819ecae15835c8d94cbe36bf765d9d9da601af4606ec09cb4ffba7b4d477d3f96b54f91e3976fdb1f

  • SSDEEP

    1536:qMs+vGM0zzrKmjqaUG0erKiMSQEszxBM8XebtZeVJ5lTU04Fcq3WZ+zXz1p0OeIf:am0zffj1y+N4dBM8h/l404qqDXz1p0O3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\27aa6d68b5178be4f204474685db6183.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    75cc92b17c1679e8eeccc995065d1ce8

    SHA1

    a3d8e8ecebc24a0a9803f9b2585a8288c96fd802

    SHA256

    123d86de13f33dfdaa6be38867ee205306fbba78e9d8e5bfac3d0775924261fb

    SHA512

    12fc329657ecab713a1423c54c5cc2f53635ffb51f8247c75b1ccaaf327f644cd6048885d58110ff2984972cdd24d4304af36eb8fdc91c251bae65a1a2de5457