Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 11:37

General

  • Target

    8911bd9e6bf23b1bba451fd8baf0c40b.pdf

  • Size

    84KB

  • MD5

    8911bd9e6bf23b1bba451fd8baf0c40b

  • SHA1

    5df5d63889e2ed11a468703cc18d44f21def6210

  • SHA256

    f2416cac06ddbb87875ce7d768bcae446b61b9e0838e04c5bcab3355cf441879

  • SHA512

    3c47cdabe85e421109af8bb33600e57c8b91a8223ebfc6da7afe38b1c6cd5ea527b056d4939ddb6524f4df7bca596c76d1d188bd298c2278732c7cdef1461065

  • SSDEEP

    1536:lJJSe3iTxLEliT7Yu1M0GlTTzToPurD0hzWGhYXy4M0BNWqiM7Vef+zsWUpO7qk1:XJ8T2cXbPETTatzW9yzwpzVef+zP7z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8911bd9e6bf23b1bba451fd8baf0c40b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1232

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          02431c1ea097651d7ef7450ec2c9cff4

          SHA1

          70525b1a91aadcbf87e5fb1b98e5a5659b99e9ed

          SHA256

          e74c8200a9770240340052b6f6580f609c3c1b952fbbace7933d50ac6e5d6ae3

          SHA512

          b5fe93aab2e4837f46231b152aaa8bbbe6f7f731e45eba4ddcd3cf31717e37f99f131d1c0bc8512cf43358d8bee0e162fa133dfd350d2fd8b766a56c16b453cb