Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2024 00:01

General

  • Target

    DarkAdapted232W/How to Install.pdf

  • Size

    543KB

  • MD5

    2a772882092dc2676c6cca5d25c18069

  • SHA1

    dcf7e4a6c769d391612a8734d602f983d194cecc

  • SHA256

    67cce382b1976e91b7d9005bf0186d6321639a859cdac22143515f16ee6adc8f

  • SHA512

    a5d50af99e7a2a694386b342aa0d6b0226b388c55d049aebe796b770c5630ed122b8eef56d42ce81b360f69d1bb3b4cae4ffd276c88aaeab29bc913d282f99e8

  • SSDEEP

    12288:tAAo9Jk5M/h8edJ/sleeRThLaCpp4W3Gudu4uEhQg:tdo9JuM/hHsleeR1uCwW2uU4uEhQg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DarkAdapted232W\How to Install.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d2351eeb9c6dafedc453f02d425bd3ae

    SHA1

    90928409c35f23beda50cf28391fa77fb47e6396

    SHA256

    baf0928003a2358a17dc55c3dd29844794f0b4abfe2e040b82bddc6e14dec4e2

    SHA512

    7f935b6c6a7709f4165a4a2c5add21f5feba4716b3cc82f5ece04c79dd607e13006ecc2cd390aae32dc21044afce5751f873e93063b829b38c827efe26bdd43c