Analysis

  • max time kernel
    190s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 07:25

General

  • Target

    2d508baea88420caffe19bfdc8c44b23.pdf

  • Size

    42KB

  • MD5

    2d508baea88420caffe19bfdc8c44b23

  • SHA1

    525c0909421e57379803253bb1ae1808ce0317b7

  • SHA256

    59e3a1e6ad7f85201fbe0a0c58c91b468d4c1e6da4d00a325f8e8f09990ebbb1

  • SHA512

    859c5ac760a0405b856a5863ba01185abf1b4dc110cfd2dd842aaf641645ae10ba29bc606f2457023595511e1a2a8d9c90f50005c3934d2f2283e2c9f4b31996

  • SSDEEP

    768:WMg86XB7GZry+rTC3NqIJtjcdtqiA1cydQMHwH76xvIDfjCv4xKxQspUzT5fEu2c:7JCQry+rTCTWy0KxQspaRRFivLUeqB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2d508baea88420caffe19bfdc8c44b23.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2608

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          c428528e77f13d860c1354d57d343217

          SHA1

          761e5d8cd87a00b04d43d64a13d137931467d6bf

          SHA256

          b3f8ed2e9821dc80f947bc05a64c36da2e831962a331e75ec64fae9182a45a7b

          SHA512

          bea5435b1065041aab8b779bfc7849e79c639b45937341c11863bae1edcb076175e460cf64c07a6ef7e47c76cb320023190c151eb5e463a04ef21f1bb426db75