Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 06:02

General

  • Target

    2b0700d4d5f281b86ea03a8589a30059.pdf

  • Size

    93KB

  • MD5

    2b0700d4d5f281b86ea03a8589a30059

  • SHA1

    a10dd45956fdef733cb6657944454dcc893e73f0

  • SHA256

    c5990cbe4391ea994a828d35bc46859b9b821e2e2c5d783150fe1454ba0d9fec

  • SHA512

    595fdba8b5d0b13b5d9e6046348463dbfc163f4902465cc79e64321c64e1410544c859ae5aa42eea800c4e5a26288bc50093ee7c21ac26e0fa2e35a7b59fb2da

  • SSDEEP

    1536:uMjH45RpvASebC086yroqps/4XBGDRKDPRuq47XRUtsW1neJP1YkgBdy4A55WEW/:pjHWRpvASem086goqVXm2PRz4lXNY3ku

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2b0700d4d5f281b86ea03a8589a30059.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6b53fb63c890f2aedd28765c96acc7c0

          SHA1

          beb5657f8c71055d32e70914e6414c1266574eb9

          SHA256

          f61cf01a198ba7c080453833eae1807754c229accdbe7c05016a2099e8c4849e

          SHA512

          7e3167209eaae2d85df216af6b407c1fb9efc62bf567f92fb240247fac0620387efb17daa591934ead3251a069739c5560d5d5834fdbf6d25329a0cab85e19e6