Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 05:40

General

  • Target

    08b1fb0c51c70b7919ac39ef7c621005.pdf

  • Size

    86KB

  • MD5

    08b1fb0c51c70b7919ac39ef7c621005

  • SHA1

    c60b69ab3aaa377a079233dba4fc4467b17904aa

  • SHA256

    de87749c62b3d3f002aff4bc5bc85cf8dee4f64a90683ba929d2a5bfc30c9ed9

  • SHA512

    9d1e6bbf15a5bbf4c19221823f3e05547cacfaa7cef4d623cc21399b81aa3fa6bb8e627a4c5500a0163a8cc2c95288bb70902ca987d6e601e1865bbb3d7f899f

  • SSDEEP

    1536:1XgWovID91BD0EznHM3zt3xFOl0ZYNZTHmXNSniTUYV8zPtvw0WgStRpDOYhqWQq:aGRju3qNZzm8+V0q86KYhtCU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08b1fb0c51c70b7919ac39ef7c621005.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3bcf6caba3de92f174966821e1fa9d11

    SHA1

    093198b42e29dc8b37b68df8bee9c726a7d9b98b

    SHA256

    9eb882627cc511ba85f60cad1a917512bf47c27b1c0c41e75279ad782673de77

    SHA512

    7892c677ceac374fa7acb41329db25084376d54ebb7baf0cc46b6f8fda6880589c251f69283b46cea4659e9131d7b19d9f3c8cb3f15f76e1a3129cccf6aa72c4