Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 07:26

General

  • Target

    2d55de4438cb13631d0fff5543f43a49.pdf

  • Size

    42KB

  • MD5

    2d55de4438cb13631d0fff5543f43a49

  • SHA1

    6a7cf5ba8429818ea1422883e3e6345df301c125

  • SHA256

    844de516c336ea096392b9103ebb245845b211d331317e031e4025005f48e82c

  • SHA512

    899a19757794120bb15a47f3ceb1c5f2a41cb413cad4a8d5d13d7dce4dc99896324ab06c98edba1127c17c0f785fa8705aaf97e175778f5e8b06a9695c0935fe

  • SSDEEP

    768:BP92KFwM0ynGjibcx1LlxDXNEk1Zy34w7z8uZ2oz1SDXNHwZg8GH:Bx1kiAHTNEsk3pHH2oz1KHxH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2d55de4438cb13631d0fff5543f43a49.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4b2182b76ee369ef985a16a87677033f

    SHA1

    6cb2e966618577a41b417960f08e540770efbd29

    SHA256

    182961a163823f6b81372602f49a01bc59859a36e2960df8c6b72ac68b5deb1b

    SHA512

    1abc46936fc56cb52b42b4fc6305bd0eea4c0c2d237a67ba97979d218a5d87d6aeda259119cca6440f25740bc14c601228b52ce77eca3237a9ee66f2477520e2