Analysis

  • max time kernel
    122s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    08-01-2024 22:01

General

  • Target

    4c8ee975bb9461c4262e03cea5a410e8.pdf

  • Size

    315KB

  • MD5

    4c8ee975bb9461c4262e03cea5a410e8

  • SHA1

    47e986f211aeb0751a639b7181ef4f65e0bcf7d0

  • SHA256

    e2475276990cb7c830ca5c888ac146c0cb35de5d5da0e5f8c8972944709f4b63

  • SHA512

    a3c7216c1604628ca29e5ca7f8e6c9c41a0d6c8db632d81b94cfd5d5e9ec1f2f94635d018792b7753d17e45e539f8d2278867fba09780ac84471152eff15ca94

  • SSDEEP

    6144:BR9fDi17uduDvmDekJZ9l0D0RsYaSEMFvCMzoLlCuDcJoXZ:5fSuy/gZ9l0D0RZbGRAJoJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c8ee975bb9461c4262e03cea5a410e8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a5b9cc00daf7c177837845ca3898b685

    SHA1

    8429fa22407c44a67edb5956e15be9dd9b5459ca

    SHA256

    4f79593b482c9d580db28c79427f9505ccec6eb0d4e5fc63713c403d1bbd7c16

    SHA512

    73f8a72eb6ddc5cf7d89ed4e4fe3069392054ea45674af998540c770aca100f603cb8c206881d83f6da5f13a8378979785d4efce7de1ada020538b26ead443aa