Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 16:11

General

  • Target

    ea8a8a6d5528a3ef75008951ecd0a288.pdf

  • Size

    90KB

  • MD5

    ea8a8a6d5528a3ef75008951ecd0a288

  • SHA1

    43e48a4e672eb1bc510fee4747ba182b5d97b500

  • SHA256

    acbb413fa14fedb387f786f15fed539eb1fc3abf4a6bc7fb1f4dd6127bb9f5b5

  • SHA512

    efbeab5c257581e6e8bfbe05aeb672a747edc00136481b22cbcbc6b63fa83c276a58e85bc68b038c70461b6ed58f4cdbde83154acce8c1697d1c855481fa9cb7

  • SSDEEP

    1536:xqHhuTuXe/1EOARwHbiMi4GMxY8cSWApO6B0PpyW+RRTHhlHmA7FwpAw:gbXYE3+iMi4X2p6B0xMRzhlHmgFwh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ea8a8a6d5528a3ef75008951ecd0a288.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    840f95a8941521e7f36224b86be2aade

    SHA1

    a8aeceedf701a1372f79a48669a4f8f23e524bbd

    SHA256

    9a66885485d4fe7cd7b63b2f8220bc20a98ecea5b9e10785dbe03ae7ed56faca

    SHA512

    cc5b86f5add08ff562c36448ff0ebc03f2c8806c1022a6aa90cd40b9a49fe0e2dfdbc5cf3a0a53e0a0b05e9ee26037d315f03feee33b9643bbc7024e33a1f176