Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 10:35

General

  • Target

    08ae6ac32bdac8b79a7544f5183cf194.pdf

  • Size

    79KB

  • MD5

    08ae6ac32bdac8b79a7544f5183cf194

  • SHA1

    f773a2694998c994f6922b754f401bf2e63fb34e

  • SHA256

    1333416baf3a3b10f26c9cfdea4af8cd9b8401e509e95e6f7d5f011e133e1ad5

  • SHA512

    ced32644f130caa8a74e5eeb1c2e62d5f5c747bd06113ee36b29c7eac351aec40236877a2a816c07cd663a3d59811c8949e1884ab93b1b3bf31ca8463f96d879

  • SSDEEP

    1536:QMX9jKKO7eBQfLQIJmzauBC0nA7qcVOpKWSyNHP5/yW8pO7NBh:zX9jKhqBx5cWO0gyD/Z7J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08ae6ac32bdac8b79a7544f5183cf194.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    983c8c18aac04a8e1c12858e0471f1f5

    SHA1

    48ec9bbee6a3adb51f5392dc54f978e21cd402d8

    SHA256

    579b3e8adcdc7504e1b2a66393516d68190c4a4865af1e8cda04e62edc05f993

    SHA512

    5ea8c1f91f0f671ea90e566ae28f40e277c2d9dd4b8b40c3a6e9d826d0c1df68053326c5ed15498508dacd76bedf66fc4f4ca240230f3e9895465ba29d5ce54a