Analysis

  • max time kernel
    118s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01-02-2024 22:47

General

  • Target

    87dcd6d83e499e53dcbb7d970dd84add.pdf

  • Size

    83KB

  • MD5

    87dcd6d83e499e53dcbb7d970dd84add

  • SHA1

    9ed8a2aff99511d2c9fc0a19fdb444ead15736ef

  • SHA256

    1c8d9c3c01bf62790e6869802ebea14510c1519cb66d6996534d1e2c15d4e6bb

  • SHA512

    1aa0a574828caef137bf0a16ab3c4a1b728cedf7fab724b96c894ea9a4ed8e200d3d50b1e0877f616833f693598f753afc9fee0f39b8a82a8ff3954f3de15dc6

  • SSDEEP

    1536:fv5Q39sFmz8EiQTZjuIy2eGW3l1UQkHvbj443OW8bqW6pOu2ZTARnpYd:3239sEz2GSJvGKwTHvnB3C3u2Zync

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\87dcd6d83e499e53dcbb7d970dd84add.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1ef53a9b4f007c4638fc6142f0d0d42b

    SHA1

    84026321db09a98501bedd6e8ac911e944dbdc1c

    SHA256

    499f321b2439f5038a9bcdcf26e24117feee191785aea0a88a8742e3f48657c3

    SHA512

    8c92b37e1fa871e77f3b50377fbd18393ae0cd7032500a536d1e985630bb1bc0b1298b8c985bd39b981d202d3ca9b7287bdea803a3f573b5e9d3ee42628801c9