Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 12:49

General

  • Target

    8ecc6b3eb38f6909fdd9ef521dfceec6.pdf

  • Size

    84KB

  • MD5

    8ecc6b3eb38f6909fdd9ef521dfceec6

  • SHA1

    cf1d6aba3ea96f309c11dd3e19eeaf765a8d7c41

  • SHA256

    091197b43acc42a800fae6671254960e713407e9dfa685b652111e2c8f218a5b

  • SHA512

    553806d2e0d216102184b5806eacdd85eacfd751a284b4a04e92183aef86fe556d369d2ae9a31d922e1549e32e0260c938cbbd7aa4ef4bc918593281e3e4a409

  • SSDEEP

    1536:vjN65Sb7WRBg+AS2nOSTA7/H7Qi3brBsAuCncHvVjA2WHAYVCDWspO2Kyx:UjBF72nOgAwirFsAsdAPQ+2/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8ecc6b3eb38f6909fdd9ef521dfceec6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c346dd33e9489b38943b4fced637abbe

    SHA1

    622d585abe045a16d646024d892261ff9041c127

    SHA256

    c6f5a3295971a7fcf297ed5f9cfe6a27d3c2e812c1412f08d3e532ca4e28104c

    SHA512

    a6bc963ac78861dbf809d951abf56a3c1bfcee9639ede54e6b70a3763abf108ddb29d3b7dd383f935567ffd954c45cb57e5c324028cacc1473e1491d5376a67d