Analysis

  • max time kernel
    118s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 07:25

General

  • Target

    2d4ea95163685fbf0ffb43c65a539835.pdf

  • Size

    92KB

  • MD5

    2d4ea95163685fbf0ffb43c65a539835

  • SHA1

    d4bf77f6d6b758b34650ffe23de7a22d98e33dcf

  • SHA256

    98b8331a26920c5a5887347381ab13de0701dcfb9ea2cad97a82ec1d4fe6a34d

  • SHA512

    1a9ed5c9b8606525b3c520f651d386de7f7c854286ac3155ee9c86a5dd13b935874049a66d50857245cda793975a21360956a92c386bb99cfd7277a2a501b881

  • SSDEEP

    1536:yFmvfQvC70XPnKZmCTY6nLqCCQj/NJTfWXQEGlDxvqH902CW8pO7qAwt:xHmi0XPn0mCXSQZJTNEyQC2p7g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2d4ea95163685fbf0ffb43c65a539835.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3068

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          e529fe52af1888cbec66555b5962b519

          SHA1

          07eae6825178f6ba8d50cac70310c8d7c5e48bdd

          SHA256

          1991656ab5a19328a4b45142cd2f87063cd7c944dd55ce3dec4f364fac0c1be0

          SHA512

          ed705670db795438f1415f49c3e91adaa18d5c5a36f655eaf37e35237f61c4e7a7ca7177d59e588828c227d0238e823d4727dab35a0d628ceb8c1a4cdf3a87f2