Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 00:38

General

  • Target

    08c3b2aa01fcd250b60a416ba7637a86.pdf

  • Size

    88KB

  • MD5

    08c3b2aa01fcd250b60a416ba7637a86

  • SHA1

    d106c3ac09b6b7b282096c3eb8e6618d75e92864

  • SHA256

    286ab4384c164d92545859408e5e83854ae1b998cf47600d5f5a9b442d4790c0

  • SHA512

    f3d95ba02962532b2edc9aff5c6186cd0d1721a73fc17511cb019488ddfd467454e2ff5f7d0a27d09e944dea780213fba364db23eec262b2545a2477990f3e29

  • SSDEEP

    1536:fw/vHM4JSlpPXx35BQ3DoSePNvakmNi1xNrWGpOKR53mbZWPaPwyaKuqBak:I/k4JQT3oePUkmNi1/sK32bEgwiuY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08c3b2aa01fcd250b60a416ba7637a86.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    666231cfcd9f0d71bdacbdacd8d32d3e

    SHA1

    d0b07967de3f4c3cfa8eb3ff9d6a166346e92c8d

    SHA256

    72aa0ab5bbdc3059e734165e0ab556bd2b3b4777880e9edd0c8eadcbee25bcee

    SHA512

    5ad7fd7732812c7cec7d9a2cbb8f027c4200501a8a3fbedde5372178a4064e8c57696dc1d0b407bac0b733f088afc42b7581463c7e0548246d04bcbe663db1e9