Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 04:14

General

  • Target

    27bc3cadbb9ab0a08f0d0a1862ff11d2.pdf

  • Size

    120KB

  • MD5

    27bc3cadbb9ab0a08f0d0a1862ff11d2

  • SHA1

    3477cbca3273050f71aee34df2c5c5e56b31913e

  • SHA256

    4ade272741a25694b01ad60d185cee23fb6cedb2bc424b2e954960228b111b4d

  • SHA512

    609f039775fcd316a4a249d254595a8d0793cf11f7c241b69bd924cbe3eca35d4a95e0503658540268cabec98080ced0a6f35062f170dbb0cec1d2b667436fa3

  • SSDEEP

    1536:DG1Cb+1TovQQvkT+4GeDvgMffVMsrr0xA7x4XNGEVRHfeHIzZpWVAO3CWQpOCF6C:yDYoDGeTF4XxHHfeHUZKAO3lCf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\27bc3cadbb9ab0a08f0d0a1862ff11d2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7eab483bfdf33f66711b415ec54f4367

    SHA1

    83303a40dbe5059319d85e3d8677f6a672626d80

    SHA256

    9c3cbc237c351ce41fe71b1bfc78f7e1ba88c34b031eb6f32d41788c02ab7504

    SHA512

    ef16408df768439d2d03f8bd075588c72dd9bc2b7d7b9357e1f3592f544adbc449f71a75bc6ecd90dbf421cf0a16a82d8fb4920ca5ad351f9445dffc50ecee60