Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 14:08

General

  • Target

    b8035c40e98c07f7a0a8c6ef95273f25.pdf

  • Size

    121KB

  • MD5

    b8035c40e98c07f7a0a8c6ef95273f25

  • SHA1

    94785e7bf5a8a79424f0b05ca65f9ab47a6a799b

  • SHA256

    a0b97b8eb92e2afdd987951b975f4a1ba6d92e134ab7c75bbbdb44ee079186c7

  • SHA512

    c27ac8b9dd13f01a4fa12976e004601fa7be27d065cc2fcaf33bf2be1604cd747523c40c56b2b90c5ec5a181ad898934f4da5aadc97b2b6c1807f92cba820516

  • SSDEEP

    3072:oKp+lpL5kP36STYgaUmZ+cCgtqIHoU5LcCjPYgnxVseGQPrFJKh:tYHeP3diU6+fCd9cCjlxLhE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b8035c40e98c07f7a0a8c6ef95273f25.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8e0b9aaa850b81ee438c5bbf45334f6e

    SHA1

    2547edf113b2ac4402e134db807ff93ebbf0dfc1

    SHA256

    2aa29d28d70bd832b26080335909dcede28b82a21c16d824d5538d491c2202b8

    SHA512

    c782216a28e999bfba85438a4aad4549ef4d58f953c60b3705c4a4bb1170a25b7b659cf022cf2f091117ce554de8313e2ff4ed8f7e350ed70e906a9666a39228