Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01-02-2024 23:10

General

  • Target

    87e9411c82452b89d95216b515f3133e.pdf

  • Size

    47KB

  • MD5

    87e9411c82452b89d95216b515f3133e

  • SHA1

    5274dcd5bdc4e02961e775707517c7575bc01838

  • SHA256

    94989b4e6442f58edbe5c316f0befada44b2d11e5c427e1aabee3cdaf9801503

  • SHA512

    e34003d903df97a4d6e7a6fa6548c887c038e7fb89169417f9f201f6b9e3a364898871a3e1477747dfc6898dafc5adfc0e70281e046fbccaad8be7dc9a356ede

  • SSDEEP

    768:cC6zlZOxKhhKEXaTOdnRrnjtru3XN9sLiLjP7ZmHkt812B/LLzxSHKNFjWm:OEE4EXRjnRr+XHKaP7ZmHkt812B/DcqB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\87e9411c82452b89d95216b515f3133e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2528a97c5209cb8a53d076d561b943ff

    SHA1

    fe0d5d58489a8c43789f61944b71c2a276b2ebad

    SHA256

    044d25a393649c0991ed99cbaaa84f6017f31d1ce8219286abba43914fad4b4f

    SHA512

    025228b3e64de0a932fcaa03a9b5ffcb9914465321e7fbe30f7bfa1c286e165415c1ab79f9d80505a5a18bb7d240e516f2602ce60efa3d14872c1dc7ff2ad761