Analysis

  • max time kernel
    124s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 06:49

General

  • Target

    2c3c3895bdf8523aff473b41ab90d0de.pdf

  • Size

    80KB

  • MD5

    2c3c3895bdf8523aff473b41ab90d0de

  • SHA1

    92144b1ffc9fe159a16c4bf138bc334d8973446c

  • SHA256

    275693bb559ac00f1d84d0a58e3b5314d986d93118ed5597448bfa6af7b83c3c

  • SHA512

    85a6ce29bfb7b3e005f3cae6849faa63648f5a3ad835c60a38a86863a7569ee92f2bda96639c7baed2f40ae5b20479873037e0026b20ce268654172982ed86b0

  • SSDEEP

    1536:7rCLR5Hu1KA9TCXJMAmSxwdnqPUCSMfM7xrcgQWpQOWUNWapOtQlDJOROl:vy/Hu8A9TQMAdOn6UdMfSrcgRQKStQl/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2c3c3895bdf8523aff473b41ab90d0de.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a4109b73ba447daba0e4aa77056614eb

    SHA1

    f3bfd3ed95667b060635c73e90c589697d82ce8a

    SHA256

    f7168620e40c6ebe21cbb7508b3819c6982abe8175a900a56a8ce6c9c3522fb6

    SHA512

    3e61140923ba139edb1d2007fea7ebc00f90d49d73da5bef748b94f1297084aaa02c3d039a2b70552588ab016b5f5a8d26c2c8ad8b1914f6bbd2e03044bc7fdb