Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/01/2024, 00:01

General

  • Target

    DarkAdapted232W/Software License.pdf

  • Size

    70KB

  • MD5

    bceebb58b5fb3cb3fc1a12c89c1a59f0

  • SHA1

    8a67d029d35aa20ff4867d844524fe15e9f6d2c8

  • SHA256

    9563a0220a98c521d4d4715fe44d69d706117b7b4ca265a582690b899434a0d7

  • SHA512

    199830d1add877c8e59a134743ff8c29d9c518b0eeec247db2622167d1bc6ed32b726fd68e72e9e1032a9da9cea1cfaccf48f85a2a95fe2c1c5c076dc11ee721

  • SSDEEP

    1536:aB5z5foOqOGCC5u/F2G+wIjwKLhdJx+EWqJ7lhv6DNxJj9Bn4VddYf0gG79/:y5z5f45u/UuOL3IQlhv6DNxJj9BnO78M

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DarkAdapted232W\Software License.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    55e91e5040f2be70b1e6d83bd1275598

    SHA1

    21280f99262b798ece839bcfd1e9d299e5d4935e

    SHA256

    6dad571c456453186e685e65ca29afceafb45b1452bb980f0314a35d4e1cc895

    SHA512

    bcb25ba8a003ca19a672ff0236144ba29beb63b6dec914b3f0adc33b23251971473fa44fbc74edc410f60447d6f33c2b613123af7683504632b8fd4c279c5bba