Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 06:36

General

  • Target

    2be37e53ed4056faa699ceb00b345789.pdf

  • Size

    84KB

  • MD5

    2be37e53ed4056faa699ceb00b345789

  • SHA1

    94c1183061aacee315f5d9f2bf38a7fa26381672

  • SHA256

    eb688e8e81d56c3e5c16d35f4a450103c1834d6402dc5926325eab3d9bfbae7a

  • SHA512

    15eb4e6e846f0ae6df9f88c2eda9da2fa70537b6e70b4e2894a883b054c69ae66b00868000e538b6a105dc5b0859fb16a0e767246972344b85ecab196a0ac71b

  • SSDEEP

    1536:Fam3yrwUaXJ2TycCkVLPAlm1W9zPekiXS09JWiWjpozulDDpzsa5JW8pO7zOhS:/DUw2T2klAA1W9rZVaJRo35g7j

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2be37e53ed4056faa699ceb00b345789.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    02feb10135fabf9021089a0551f8a752

    SHA1

    83a83e4f40484e2d1cd024d13fa7933b7ab2a6a8

    SHA256

    ee84efed8e9d2983a3ab18329449ec25f3c9154036f24442c9d9c9f6a20a095c

    SHA512

    1f50318e1cf3568891b220a4f0f448a4cf3b55d2bbfd575047db574c4ffb42a819f1f77c91a36f680404b3c4a04ad3bdc2874a3ed1b077c0f6282c856d7aa17a