Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 06:30

General

  • Target

    2bbf76cb5ef44bf690872e0486724903.pdf

  • Size

    44KB

  • MD5

    2bbf76cb5ef44bf690872e0486724903

  • SHA1

    860015424f9ace614e2d61d1fcf44af2f071a5e3

  • SHA256

    504e7b9d1ad0cffec0148e9ba82fc5566a25631da17147d7ba0ade53ab752ba4

  • SHA512

    0a2e6901a1c09e929470fb2dd0ff09ff950fdf8844ff1e632464ed2f57c6081d8a42bcbb3738a1e703682e0660e7c1b4e2077393a7bf30334d2f728f3604d8ec

  • SSDEEP

    768:zgGzpD/Q3RDrqIC76TazRiAobXd9gHzAvyGJi1MWFMn97hjPPNXlPWYSfC:MGFbaqIs6TKRiAoh9AzoyGCMWuphLPJH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2bbf76cb5ef44bf690872e0486724903.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f339ec8b9912869ca1ff84edc774542b

    SHA1

    b64c8bd1ad3aee15950362916179f18cf596508e

    SHA256

    024119d0807aa8283f4eb1cbf00992eaa842661ca1015c189b13cc5d89b4fb2c

    SHA512

    00140be6e2b0a027b3c9f5af625664eba987a3de560a6ce7c43431c17c66c78eb977408867065ce9d9f671b45d9f5c458e7811288199f4a1f1d2ba993eb601ba