Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 10:35

General

  • Target

    08c498cadba4a26c0d901d08ca087b25.pdf

  • Size

    80KB

  • MD5

    08c498cadba4a26c0d901d08ca087b25

  • SHA1

    c2866370bacfc7ac82fcfd444b6d7e2ff2468ab0

  • SHA256

    09ac4e1c077af6500b1c5ffa339fd2a8b8be32e5ca675e41dae949819d3b7fcb

  • SHA512

    6a60a7da054d0ae8b663c94b0fe1eb841df691e1332980d7f15e54480787b5a899f070c300d6389b97967f3e82b70bc6fe28b00b21639b697b97e609414c5e51

  • SSDEEP

    1536:0fmscjG+J5w7zzGp5TinzPDL7JcpZUWzoKSTpT3rmgWI3FWspO2g8x:g1eGfmPinzPDL6DjSt3rmgWis2Z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08c498cadba4a26c0d901d08ca087b25.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    67aa8b917f9bd3453ee5bddc035f9b8a

    SHA1

    82184fae321515cac1af5d807f84afcf53174219

    SHA256

    286dbc33f8f9dad5738acc89f11f05e022cdce62a1d2b183d3f8ff57844abcc4

    SHA512

    b0392b60c9b9c0b185944df56474c5864a956a855d00fec76a52e81aa69ac5e73b2577223e33ce78dbda0c481ba0376a17f3d644b3c93f77b825866ba095986b