Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 00:07

General

  • Target

    08024373dc9c1c4205ed4791f65989ad.pdf

  • Size

    87KB

  • MD5

    08024373dc9c1c4205ed4791f65989ad

  • SHA1

    7f6873f7ea80d04b95426041079b43823c0c9ea1

  • SHA256

    5bf67e69928f391161520014056a0e3cfb7c2387b340f4195b610c51635b9798

  • SHA512

    b5da3c3abd9c4f395a4a0d8cc0dbc4eacbbf2c62be9834d1afb6ad6eca9225e3201dda30c855172a9ae0db6a0c4f0dc283febb7a33186e2ad0ec1a68d14b88d6

  • SSDEEP

    1536:m9Ty58f6lsYIoCdPRIE7F7i+E8AyZr0IqWiqT9JQhBMUFWJYo2VLTpekYOWQpOC9:X1livdPRIu++El0hZJInuYpGkYBC9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08024373dc9c1c4205ed4791f65989ad.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2915fa69dc10816c981f2cc13cbf897b

    SHA1

    8ccb0e1fb702f826636abaf67de8434a4236796b

    SHA256

    a2dd6e7c89425a79dd04ce8422bb8ef9f344a7a14c8a474cb2a6d4b4cd7fbf9c

    SHA512

    eb3f1876af98fa32a21ac728d78d1fa80deb1df49b414090f325553d89924224140c2eef3e24556e68614d919278de464f42a0fdcc04b55392bda22bbe0ebb11